Question

I have an Edit Form page which edits existing posts. i wanted to put a Preview link into this page. what i want is ; when i click preview link it must ;

1. take form element’s current values and write them into my
   Post_Preview Model.
2. then , ajax function must redirect to my *show_preview* page which i defined in views and urls.
3. and in show_preview page (preview.html) it must be rendered. (form’s
   current values)

this is how it must works. And here are my codes :

and my edit-form page:

<form method="post" action="">
    {% csrf_token %}
    <input type="hidden" id="post_owner" value="{{ post.owner }}"/></td>
    <input type="hidden" id="post_id" value="{{ post.id }}"> </td>

            {{ form.title }}
            {{ form.body }}

    <a href="#" id="preview">Preview</a>
    <input type="submit" value="Save" style="cursor: pointer;"/>
</form>

ajax Function:

$(function(){

    $('#preview').click(function() {

        var title = $('#id_title').val();
        var body = $('#id_body').val();
        var owner = $('#post_owner').val(); //hidden value at form page
        var id = $('#post_id').val();  //hidden value at form page

     var ajaxOptions = {
         type:'post',
         url : '/admin/post/save_preview/', //save_preview's url
         data : {
             'title' : title,
             'body'  : body,
             'owner' : owner,
             'id'    : id
         },
         success: function(){
             window.open("/blog/"+owner+"/preview/"+id); //show_preview's url
         },
         error: function(){
            alert('There is an Error'); //this is what i see when click preview link.
         }
     };
       $.ajax(ajaxOptions);
});
});

my save_preview view:

def save_preview(request):
    title = request.POST['title']
    body = request.POST['body']
    owner = request.POST['owner']
    post_id = request.POST['id']
    try:
        preview = Post_Preview(id=post_id, title=title, body=body, owner=owner)
        preview.save()
    except:
        pass
    return HttpResponse(200)

my show_preview view:

def show_preview(request,post_id,username):
    preview = Post_Preview.objects.get(id=post_id)

    return render_to_response('preview.html',{'post': preview}, context_instance=RequestContext(request))

my related url lines:

url(r'^admin/post/save_preview/', view='save_preview' ,name='save_preview'),
url(r'^blog/(?P<username>[-\w]+)/preview/(?P<post_id>\d+)', view='show_preview', name='show_preview'),

When i click Preview link at edit-form page : it shows ‘There is an Error’ error; which is defined in ajax function.

thank you!

edit : there is more code before my ajax function in js file (which are related to django-ajax relation ):

function getCookie(name) {
    var cookieValue = null;
    if (document.cookie && document.cookie != '') {
        var cookies = document.cookie.split(';');
        for (var i = 0; i < cookies.length; i++) {
            var cookie = jQuery.trim(cookies[i]);
            // Does this cookie string begin with the name we want?
            if (cookie.substring(0, name.length + 1) == (name + '=')) {
                cookieValue = decodeURIComponent(cookie.substring(name.length + 1));
                break;
            }
        }
    }
    return cookieValue;
}
var csrftoken = getCookie('csrftoken');

function csrfSafeMethod(method) {
    // these HTTP methods do not require CSRF protection
    return (/^(GET|HEAD|OPTIONS|TRACE)$/.test(method));
}
function sameOrigin(url) {
    // test that a given url is a same-origin URL
    // url could be relative or scheme relative or absolute
    var host = document.location.host; // host + port
    var protocol = document.location.protocol;
    var sr_origin = '//' + host;
    var origin = protocol + sr_origin;
    // Allow absolute or scheme relative URLs to same origin
    return (url == origin || url.slice(0, origin.length + 1) == origin + '/') ||
        (url == sr_origin || url.slice(0, sr_origin.length + 1) == sr_origin + '/') ||
        // or any other URL that isn't scheme relative or absolute i.e relative.
        !(/^(\/\/|http:|https:).*/.test(url));
}
$.ajaxSetup({
    beforeSend: function(xhr, settings) {
        if (!csrfSafeMethod(settings.type) && sameOrigin(settings.url)) {
            // Send the token to same-origin, relative URLs only.
            // Send the token only if the method warrants CSRF protection
            // Using the CSRFToken value acquired earlier
            xhr.setRequestHeader("X-CSRFToken", csrftoken);
        }
    }
});

edit 2: when i add try/except blocks for save_preview ; i didnt throw popup error page. it redirected to save_preview page and threw and error :

Post_Preview matching query does not exist.

156. preview = Post_Preview.objects.get(id=post_id)

Answer 1

You’re not sending the csrf token in $.ajax.