AJAX 请求上的 CakePHP 403 [英] CakePHP 403 on AJAX request
问题描述
我正在尝试使用 AJAX 自动完成我网站上的搜索框.我正在使用 firebug 来测试我的应用程序.当我尝试搜索某些内容时,Firebug 告诉我 AJAX 请求返回了 403 禁止错误.但是,当我复制 AJAX 请求中的 EXACT URL 时,它返回正确的数据.
I'm trying to use AJAX to autocomplete a search box on my website. I was using firebug to test my application. When I try to search something, Firebug tells me that the AJAX request returned a 403 forbidden error. However, when I copy the EXACT URL that was in the AJAX request, it returns the correct data.
我认为这必须是 JavaScript 方面的事情.与普通请求相比,AJAX 请求是否有可能被省略的标头?
I think this has to be something on the JavaScript side. Are there any headers that might be omitted with an AJAX request compared to a normal request?
这是失败的 AJAX 请求上的 $_SERVER 变量(我删除了两个请求中相同的参数) (1) 与输入 URL 并有效 (2):
Here is the $_SERVER variable (I removed the parameters that were the same on both requests) on an AJAX request that failed (1) vs typing the URL in and it works (2):
(1)
2011-04-02 13:43:07 Debug: Array
(
[HTTP_ACCEPT] => */*
[HTTP_COOKIE] => CAKEPHP=0f9d8dc4cd49e5ca0f1a25dbd6635bac;
[HTTP_X_REQUESTED_WITH] => XMLHttpRequest
[REDIRECT_REDIRECT_UNIQUE_ID] => TZdgK654EmIAAEjknsMAAAFG
[REDIRECT_UNIQUE_ID] => TZdgK654EmIAAEjknsMAAAFG
[REMOTE_PORT] => 60252
[UNIQUE_ID] => TZdgK654EmIAAEjknsMAAAFG
[REQUEST_TIME] => 1301766187
)
(2)
2011-04-02 13:44:02 Debug: Array
(
[HTTP_ACCEPT] => text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
[HTTP_COOKIE] => CAKEPHP=d8b392a5c3ee8dd948cee656240fd5ea;
[REDIRECT_REDIRECT_UNIQUE_ID] => TZdgYq54EmIAAF7zt6wAAAJJ
[REDIRECT_UNIQUE_ID] => TZdgYq54EmIAAF7zt6wAAAJJ
[REMOTE_PORT] => 60281
[UNIQUE_ID] => TZdgYq54EmIAAF7zt6wAAAJJ
[REQUEST_TIME] => 1301766242
)
推荐答案
我想我找到了解决方案.我将安全级别设置为中等以解决问题.我在 config 文件夹中找到了这一行.中等安全级别是否会在生产中造成任何问题?
I think I found the solution. I set the security level to medium to solve the issue. I found this line in the config folder. Does a medium security level pose any problems in production?
/**
* The level of CakePHP security. The session timeout time defined
* in 'Session.timeout' is multiplied according to the settings here.
* Valid values:
*
* 'high' Session timeout in 'Session.timeout' x 10
* 'medium' Session timeout in 'Session.timeout' x 100
* 'low' Session timeout in 'Session.timeout' x 300
*
* CakePHP session IDs are also regenerated between requests if
* 'Security.level' is set to 'high'.
*/
Configure::write('Security.level', 'medium');
这绝对是解决方案.这是发生的事情:
This is definitely the solution. Here's what was happening:
当安全级别设置为高时,每次请求都会生成一个新的会话 ID.
When the security level is set to high, a new session ID is generated upon every request.
这意味着当我发出 ajax 请求时,会生成一个新的会话 ID.
That means that when I was making ajax requests, a new session ID would be generated.
如果您停留在同一页面上,JavaScript 会发出一个请求,该请求会生成一个新的 session_id,并且不会记录新的 session_id.
If you stay on the same page, JavaScript makes a request, which generates a new session_id, and doesn't record the new session_id.
所有后续的 ajax 请求都使用旧的 session_id,它被声明为无效,并返回一个空会话.
All subsequent ajax requests use an old session_id, which is declared invalid, and returns an empty session.
这篇关于AJAX 请求上的 CakePHP 403的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!