Using CSRF in Laravel

Question

Here is my CSRF as hidden

<input type="hidden" name="_token" value="<?php echo csrf_token(); ?>">

And my csrf is generated as usual

While i am passing into route for a controller

Here is my old route

Route::post('register', 'RegisterController@registeruser');

And to make it with csrf

Route::post('register', array('before' => 'csrf', function()
{
    return 'You gave a valid CSRF token!';
}));

While i routing it to the controller

Route::post('register', array('before' => 'csrf', RegisterController@registeruser()
{
    return 'You gave a valid CSRF token!';
}));

I am getting the error

syntax error, unexpected '{', expecting ')'

What is the mistake i am doing and how can i fix this ?

Laurence · Accepted Answer · 2014-11-05 04:40:26Z

2

Your route should be this:

Route::post('register', array('before' => 'csrf', 'uses' => 'RegisterController@registeruser');

Then you can handle it in your controller

class RegisterControllerextends Controller {

    protected function registeruser()
    {
        return 'You gave a valid CSRF token!';
    }

}

answered Nov 5, 2014 at 4:40

Laurence

60.3k22 gold badges178 silver badges215 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

And may i use like this ? Route::get('view',array('before' => 'csrf', 'uses' => 'ViewController@view'));

You would not use CSRF for GET routes. Only POST, PUT and DELETE

And in raw php i use http referer validation, is it equivalent to this ?if($_SERVER['HTTP_REFERER'] == '') {header("Location: logout");}