fix bug: add to cart and favorite fail

Author: fancyecommerce

app/appfront/modules/Catalog/controllers/FavoriteproductController.php

@@ -17,7 +17,7 @@
  */
 class FavoriteproductController extends AppfrontController
 {
-    public $enableCsrfValidation = true;
+    public $enableCsrfValidation = false;
     // 增加收藏
     public function actionAdd()
     {

app/appfront/modules/Checkout/controllers/CartController.php

@@ -19,6 +19,15 @@
 class CartController extends AppfrontController
 {
     public $enableCsrfValidation = true;
+    public $noCsrfActions = ['add'];
+
+    public function beforeAction($action)
+    {
+        if(in_array($action->id, $this->noCsrfActions)) {
+            $this->enableCsrfValidation = false;
+        }
+        return parent::beforeAction($action);
+    }
 
     public function actionIndex()
     {

app/appfront/modules/Customer/controllers/AjaxController.php

@@ -43,10 +43,10 @@ public function actionIndex()
             }
             if ($product_id) {
                 // 添加csrf数据
-                $csrfName = \fec\helpers\CRequest::getCsrfName();
-                $csrfVal = \fec\helpers\CRequest::getCsrfValue();
-                $result_arr['csrfName'] = $csrfName;
-                $result_arr['csrfVal'] = $csrfVal;
+                //$csrfName = \fec\helpers\CRequest::getCsrfName();
+                //$csrfVal = \fec\helpers\CRequest::getCsrfValue();
+                //$result_arr['csrfName'] = $csrfName;
+                //$result_arr['csrfVal'] = $csrfVal;
                 $result_arr['product_id'] = $product_id;
             }
             $cartQty = Yii::$service->cart->getCartItemQty();

app/appfront/theme/base/front/catalog/product/index.php

@@ -255,7 +255,9 @@
 				$data['custom_option'] 	= custom_option_json;
 				$data['product_id'] 	= "<?= $_id ?>";
 				$data['qty'] 			= qty;
-				$data[csrfName] 		= csrfVal;
+				if (csrfName && csrfVal) {
+					$data[csrfName] 		= csrfVal;
+				}
 				jQuery.ajax({
 					async:true,
 					timeout: 6000,
@@ -293,7 +295,9 @@
 				csrfVal  = $(".product_csrf").val();
                 param = {};
                 param["product_id"] = product_id;
-                param[csrfName] = csrfVal;
+				if (csrfName && csrfVal) {
+					param[csrfName] = csrfVal;
+				}
                 doPost(url, param);
 			}
 	   });
@@ -352,7 +356,6 @@
 	<?php $this->endBlock(); ?> 
 	<?php $this->registerJs($this->blocks['add_to_cart'],\yii\web\View::POS_END);//将编写的js代码注册到页面底部 ?>
 
-	
 	//tab 切换js
 	<?php $this->beginBlock('product_info_tab') ?> 
 	var navContainer = document.getElementById("nav-container");  

app/apphtml5/modules/Catalog/controllers/FavoriteproductController.php

@@ -17,7 +17,7 @@
  */
 class FavoriteproductController extends AppfrontController
 {
-    public $enableCsrfValidation = true;
+    public $enableCsrfValidation = false;
 
     // 增加收藏
     public function actionAdd()
@@ -30,7 +30,7 @@ public function actionAdd()
 
     public function actionLists()
     {
-        $data = $this->getBlock()->getLastData($editForm);
+        $data = $this->getBlock()->getLastData();
 
         return $this->render($this->action->id, $data);
     }

app/apphtml5/modules/Checkout/controllers/CartController.php

@@ -19,6 +19,15 @@
 class CartController extends AppfrontController
 {
     public $enableCsrfValidation = true;
+    public $noCsrfActions = ['add'];
+
+    public function beforeAction($action)
+    {
+        if(in_array($action->id, $this->noCsrfActions)) {
+            $this->enableCsrfValidation = false;
+        }
+        return parent::beforeAction($action);
+    }
 
     public function actionIndex()
     {

app/apphtml5/modules/Customer/controllers/AjaxController.php

@@ -72,10 +72,10 @@ public function actionProduct()
             }
             if ($product_id) {
                 // 添加csrf数据
-                $csrfName = \fec\helpers\CRequest::getCsrfName();
-                $csrfVal = \fec\helpers\CRequest::getCsrfValue();
-                $result_arr['csrfName'] = $csrfName;
-                $result_arr['csrfVal'] = $csrfVal;
+                //$csrfName = \fec\helpers\CRequest::getCsrfName();
+                //$csrfVal = \fec\helpers\CRequest::getCsrfValue();
+                //$result_arr['csrfName'] = $csrfName;
+                //$result_arr['csrfVal'] = $csrfVal;
                 $result_arr['product_id'] = $product_id;
             }
         }

app/apphtml5/theme/base/html5/catalog/product/index.php

@@ -290,7 +290,9 @@
 				$data['custom_option'] 	= custom_option_json;
 				$data['product_id'] 	= "<?= $_id ?>";
 				$data['qty'] 			= qty;
-				$data[csrfName] 		= csrfVal;
+				if (csrfName && csrfVal) {
+					$data[csrfName] 		= csrfVal;
+				}
 				$.ajax({
 					async:true,
 					timeout: 6000,