错误：POST http://localhost:8765/users/delete/delete8 403（禁止）答案

【问题标题】：ERROR: POST http://localhost:8765/users/delete/delete8 403 (Forbidden)错误：POST http://localhost:8765/users/delete/delete8 403（禁止）
【发布时间】：2021-05-04 05:54:18
【问题描述】：

我正在使用 cakephp4。试图添加一些甜食。单击删除按钮时会弹出 Sweetalert，但是当我单击确认删除时，它不会删除数据。

模板/布局/用户/index.php

<table>
<tr>
    <th>Username</th>
    <th>Usertype</th>
    <th>Created</th>
    <th>Action</th>
</tr>

<?php foreach ($users as $user) : ?>
    <tr>
        <td>
            <?= $this->Html->link($user->username, ['action' => 'view', $user->slug]); ?>
        </td>
        <td>
            <?= $this->Html->tag('span', $user->utype) ?>
        </td>
        <td>
            <?= $user->created->format(DATE_RFC850); ?>
        </td>
        <td>
            <?= $this->Html->link('Edit', ['action' => 'edit', $user- 
               >slug]); ?> /
            
            <a href="#" class="delete" data-slug="<?=$user->slug? 
               >">Delete</a>
           
        </td>
    </tr>
<?php endforeach; ?>

模板/布局/用户/index.php

<script>

deletes = document.getElementsByClassName('delete');
Array.from(deletes).forEach((element) => {
  element.addEventListener("click", (e) => {
    let ajax_url = $(e.target).attr('data-slug');
    
    Swal.fire({
      title: 'Are you sure?',
      text: "You won't be able to revert this!",
      icon: 'warning',
      showCancelButton: true,
      confirmButtonColor: '#3085d6',
      cancelButtonColor: '#d33',
      confirmButtonText: 'Yes, delete it!'
    }).then((result) => {
      if (result.isConfirmed) {
          $.ajax({
            method: 'POST',
            url: '/users/delete/'+ ajax_url,
            beforeSend: function(xhr){
                xhr.setRequestHeader(
                    'X-CSRF-Token',
                    <?= json_encode($this->request- 
                       >getParam('_csrfToken')); ?>
                );
            },
            success: function(response){
                if(response){
                    Swal.fire(
                        'Deleted!',
                        'Your file has been deleted.',
                        'success'
                    )
                }
                else {
                    Swal.fire({
                      icon: 'error',
                      title: 'Oops...',
                      text: 'No data deleted',
                 })
      }
            },
            error: function(e){
                console.log('error', e);
            }
          })
       
      } 
    })
  })
})

删除方法如下在我的UsersController.php中

UsersController.php

public function delete($slug)
{
    $this->request->allowMethod(['post', 'delete']);
    $user = $this->Users->findBySlug($slug)->firstorFail();
    if ($this->Users->delete($user)) {
        $this->Flash->success("Deleted Successfully");
        return $this->redirect(['action' => 'index']);
    }
    $this->Flash->error('Unable to Delete user');
    return $this->redirect(['action' => 'index']);
}

路由文件在这里配置/路由.php

  <?php

   use Cake\Http\Middleware\CsrfProtectionMiddleware;
   use Cake\Routing\Route\DashedRoute;
   use Cake\Routing\RouteBuilder;


  $routes->setRouteClass(DashedRoute::class);

  $routes->scope('/', function (RouteBuilder $builder) {

   $builder->connect('/', ['controller' => 'Pages', 'action' => 
'display', 'home']);
  
  $builder->connect('/users/delete/{slug}', ['controller' => 'Users', 
'action' => 'delete']);

  $builder->connect('/pages/*', 'Pages::display');

  $builder->fallback();

});

【问题讨论】：

如果错误与标题中的相同，您很可能在 id 之前缺少斜杠字符 /。注意你指的是什么网址。也许您可以在发送请求之前预览其中的内容？尝试将console.log('/users/delete/'+ ajax_url) 放在Swal.fire 行之前。
我做了 console.log('/users/delete/'+ ajax_url) 。在这个我得到这个 URL /users/delete/username 用户名是用户的名字
可以分享一下路由吗？
路由什么的？
应用程序路由。如果您使用的是 Cake 框架，则可能有一个 config/routes.php 文件。我想看看这个端点的定义是什么。

标签： javascript php jquery cakephp cakephp-4.x

【解决方案1】：

我确定它是 CSRF 令牌。尝试替换

<?= json_encode($this->request->getParam('_csrfToken')); ?>

与

<?= json_encode($this->request->getAttribute('csrfToken')); ?>

我也不确定你的“beforeSend: function(xhr)”，你可以在这里看到一个有效的 ajax 调用示例：

https://stackoverflow.com/a/67253585/15256337

【讨论】：