fix: заменить yii.getCsrfToken() на meta[csrf-token] во всех модулях buyer-reference

yii объект недоступен в контексте внешних JS-файлов. Читаем токен напрямую
из <meta name="csrf-token"> — так же работает во всех браузерах.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

diff --git a/erp24/views/marking/index.php b/erp24/views/marking/index.php
index ee9bbe8403f23a01826156399b49d1c4bf8c1edf..1e438bb3ada923b5b3d37d67db578160d640d981 100644 (file)
--- a/erp24/views/marking/index.php
+++ b/erp24/views/marking/index.php
@@ -274,7 +274,7 @@ $js = <<<JS
         \$.ajax({
             url: '{$deleteUrl}?id=' + id,
             type: 'POST',
-            data: {_csrf: yii.getCsrfToken()},
+            data: {_csrf: $('meta[name="csrf-token"]').attr('content')},
             dataType: 'json',
             success: function(resp) {
                 if (resp.success) {

diff --git a/erp24/views/producer/index.php b/erp24/views/producer/index.php
index 1193f5669c749b585591e0f91a9920c20a558412..dfe5d399665f07f68df5083bc3b4fff42a8340c1 100644 (file)
--- a/erp24/views/producer/index.php
+++ b/erp24/views/producer/index.php
@@ -283,7 +283,7 @@ $js = <<<JS
         $.ajax({
             url: '{$deleteProducerUrl}?id=' + id,
             type: 'POST',
-            data: {_csrf: yii.getCsrfToken()},
+            data: {_csrf: $('meta[name="csrf-token"]').attr('content')},
             dataType: 'json',
             success: function(resp) {
                 if (resp.success) {
@@ -382,7 +382,7 @@ $js = <<<JS
         $.ajax({
             url: '{$deletePlantationUrl}?id=' + id,
             type: 'POST',
-            data: {_csrf: yii.getCsrfToken()},
+            data: {_csrf: $('meta[name="csrf-token"]').attr('content')},
             dataType: 'json',
             success: function(resp) {
                 if (resp.success) {

diff --git a/erp24/web/js/product-mapping/index.js b/erp24/web/js/product-mapping/index.js
index 3d511aa4b591c1ef15215e58f8b00028d314c629..3a53a0c7f13310ae0f9fb39ffcd54be7833119ad 100644 (file)
--- a/erp24/web/js/product-mapping/index.js
+++ b/erp24/web/js/product-mapping/index.js
@@ -26,6 +26,11 @@
        Helpers
     ─────────────────────────────────────────────── */
 
+    function getCsrf() {
+        var el = document.querySelector('meta[name="csrf-token"]');
+        return el ? el.getAttribute('content') : '';
+    }
+
     function collectFilters() {
         var params = {};
         $('.pm-filter').each(function () {
@@ -262,7 +267,7 @@
             $.ajax({
                 url: state.cfg.urls.delete + '?id=' + id,
                 type: 'POST',
-                data: {_csrf: yii.getCsrfToken()},
+                data: {_csrf: getCsrf()},
                 dataType: 'json',
                 success: function (resp) {
                     if (resp.success) reloadList();

diff --git a/erp24/web/js/supplier/index.js b/erp24/web/js/supplier/index.js
index ff8f6e5da5686db819155244733db02fdc095a6c..8a53ba71ee97fb7cf1cee2cb87cbb0577e37c725 100644 (file)
--- a/erp24/web/js/supplier/index.js
+++ b/erp24/web/js/supplier/index.js
@@ -17,6 +17,11 @@
     var shouldReload = false;
     var _bsModal = null;
 
+    function getCsrf() {
+        var el = document.querySelector('meta[name="csrf-token"]');
+        return el ? el.getAttribute('content') : '';
+    }
+
     var loaderHtml = '<div class="text-center p-4"><i class="fa fa-spinner fa-spin fa-2x text-secondary"></i></div>';
 
     function getModal() {
@@ -138,7 +143,7 @@
         $.ajax({
             url: urls.delete + '?id=' + id,
             type: 'POST',
-            data: {_csrf: yii.getCsrfToken()},
+            data: {_csrf: getCsrf()},
             dataType: 'json',
             success: function (resp) {
                 console.log('[supplier] деактивация ответ:', resp);