403禁止swfupload和django错误 [英] 403 Forbidden error on swfupload and django

问题描述

我正在尝试使用脚本进行多个文件上传，如swfupload或uploadify在我的django应用程序，但无论我尝试，我总是得到一个403禁止错误的上传URL。如果我尝试独立地运行相同代码（只是不同的链接到相同的文件），它的作用就像一个魅力。

任何想法，如果我缺少一些东西我的主要代码还是有一些我不知道的设置？

解决方案

这与 CSRF保护。在我的情况下，我解决了这个问题，使得

views.py

  def photo_upload（request）：
 if request.method =='POST'：
 for field_name in request.FILES：
 .... 
 .... 
 return HttpResponse（ok，mimetype =text / plain）
 
 else：
返回render_response（请求，'wpphotos / post / photo_upload .html'，{csrf_token：get_token（request）}，context_instance = RequestContext（request））
  

因为flash在上传时使用自己的会话，你应该在你的中间件中设置 csrf_token 值，这样

从django.core.urlresolvers导入反向的swfupload.py

  
 
 class SWFUploadMiddleware（object）：
 
 def process_request（self，request）：
 if（request.method =='POST'）和（request.path == rev erse（'project_name.module_name.views.photo_upload'））和\ $​​ b $ b request.POST.has_key（settings.SESSION_COOKIE_NAME）：
 request.COOKIES [settings.SESSION_COOKIE_NAME] = request.POST [settings。 SESSION_COOKIE_NAME] 
如果request.POST.has_key（'csrftoken'）：
 request.COOKIES ['csrftoken'] = request.POST ['csrftoken'] 
  

对于最后一步，您应该将 csrftoken 作为您的javascript中的 SWFUpload 设置使得

photo_upload.html

  window.onload = function（）{
 swfupload = new SWFUpload（{
 post_params：{
csrfmiddlewaretoken：{{csrf_token 
}，
 upload_url：/ module_name / post / photo_upload /，
 flash_url：/media/flash/swfupload.swf，
 file_size_limit：2.5 MB，
 .... 
 .... 
 .... 
}）; 
}; 
  

I'm trying to use a script for multiple file uploads, like swfupload or uploadify on my django application but no matter what I try, I always get a 403 forbidden error for the upload URL. If I try to run the 'same' code (just different links to same files) independently, it works like a charm.

Any idea if I'm missing something on my main code or is there some kind of setting that I don't know about?

解决方案

This is totally related with CSRF protection. In my case I solved that issue such that,

views.py

def photo_upload(request):
    if request.method == 'POST':
         for field_name in request.FILES:
         ....
         ....
         return HttpResponse("ok", mimetype="text/plain")

    else:       
         return render_response(request, 'wpphotos/post/photo_upload.html', {"csrf_token": get_token(request)},context_instance=RequestContext(request))

Because flash useses its own session while uploading, you should set csrf_token value in your middleware such that

swfupload.py

from django.conf import settings
from django.core.urlresolvers import reverse

class SWFUploadMiddleware(object):

def process_request(self, request):
    if (request.method == 'POST') and (request.path == reverse('project_name.module_name.views.photo_upload')) and \
            request.POST.has_key(settings.SESSION_COOKIE_NAME):
        request.COOKIES[settings.SESSION_COOKIE_NAME] = request.POST[settings.SESSION_COOKIE_NAME]
    if request.POST.has_key('csrftoken'):           
        request.COOKIES['csrftoken'] = request.POST['csrftoken']

For the last step, you should set csrftoken as post parameter in your javascript for SWFUpload settings such that

photo_upload.html

window.onload = function() {
    swfupload = new SWFUpload({
        post_params: {
            "csrfmiddlewaretoken": "{{csrf_token}}"
        },
        upload_url: "/module_name/post/photo_upload/",
        flash_url: "/media/flash/swfupload.swf",
        file_size_limit : "2.5 MB",
                    ....
                    ....
                    ....
            });
    };

这篇关于403禁止swfupload和django错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！