Notice: the {{ errors }}
and {{ success }}
tags won't work with this. As you're redirecting back to the same static page. Best options for this is to have basic html validation for the fields, and on success redirect to a success page.
- Copy the "DynamicToken" folder contents to your Statamic
site/addons
directory - Run
php please update:addons
to load the addons dependencies.
You can configure the addon by visiting CP > Addons > Dynamic Token:
- Refresh interval - an interval for updating your csrf token every
n
minutes. - CSS Selector - If you want to change the default selector, note this will break
{{ form:create }}
.
- disable CSRF verification by adding
/!/DynamicToken
to thecsrf_exclude
array insite/settings/system.yaml
. Don't worry we check that the referrer is comming from yourAPP_URL
, but this still carries its own risks. - add a
{{ dynamic_token }}
to your layout file just before</body>
tag. - add an
APP_URL=<your_site_url>
to your.env
file. e.g.:APP_URL=site.com
local development:APP_URL=localhost
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<title>Dynamic Token</title>
</head>
<body>
{{ form:create in="superfans" }}
{{ fields }}
<label>{{ display }}
<input type="text" name="{{ field }}" value="{{ old }}" />
</label>
{{ /fields }}
{{ /form:create }}
{{ dynamic_token }}
</body>
</html>
Icons made by Freepik from www.flaticon.com