]> gitweb.erp-flowers.ru Git - erp24_rep/yii-erp24/.git/commit
fix(ERP-247): add CSRF token to AJAX calls in WriteOffsErp view origin/feature_filippov_fix_write_offs_erp_csrf
authorAleksey Filippov <Aleksey.Filippov@erp-flowers.ru>
Sat, 28 Feb 2026 17:23:29 +0000 (20:23 +0300)
committerAleksey Filippov <Aleksey.Filippov@erp-flowers.ru>
Sat, 28 Feb 2026 17:23:29 +0000 (20:23 +0300)
commit8bf0d86afdf2d76d44a0f676b5babecb699e73de
treedc6f27370f4ec8c0bbadce76d72205421b70d763
parent78e54d5b71c3dd32293e544ef9e40cabe6b047bb
fix(ERP-247): add CSRF token to AJAX calls in WriteOffsErp view

$.ajax() calls for confirm-write-off and re-send-write-off were posting
without _csrf token, causing BadRequestHttpException 400 on every request.
Added yii.getCsrfToken() to data payload of both calls.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
erp24/views/write_offs_erp/view.php