blocks|key|1896786|text|您可以在组内有组：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1896787|Route::group(array('before'+=>+'session'),+function()
{
++++Route::get('/login',+array('as'=>'login',+'uses'=>'LogonController@form'));

++++Route::group(array('before'+=>+'csrf'),+function()
++++{
++++++++Route::post('/login',+array('as'=>'login.post',+'before'+=>+'csrf',+'uses'=>'LogonController@login'));

++++++++Route::group(array('before'+=>+'permissions'),+function()
++++++++{
++++++++++++Route::post('/store/checkout/new/shipping/address',+array('as'=>'store.checkout.shipping.address.new',++'uses'=>'StoreController@newShippingAddress'));
++++++++}
++++}
}|code-block|syntax|javascript|1896788|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

You can have groups inside a group:

<pre><code>Route::group(array('before' =&gt; 'session'), function()
{
 Route::get('/login', array('as'=&gt;'login', 'uses'=&gt;'LogonController@form'));

 Route::group(array('before' =&gt; 'csrf'), function()
 {
 Route::post('/login', array('as'=&gt;'login.post', 'before' =&gt; 'csrf', 'uses'=&gt;'LogonController@login'));

 Route::group(array('before' =&gt; 'permissions'), function()
 {
 Route::post('/store/checkout/new/shipping/address', array('as'=&gt;'store.checkout.shipping.address.new', 'uses'=&gt;'StoreController@newShippingAddress'));
 }
 }
}
</code></pre>

blocks|key|3039264|text|在使用资源丰富的路由时，您可以从控制器中执行此操作。|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|3039265|public+function+__construct()+{
++$this->beforeFilter('csrf',+array('on'+=>+'post'));
}|code-block|syntax|javascript|3039266|entityMap^0|3|7|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|P|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|L|$]]

You can do this from your controller when working with resourceful routing.

<pre><code>public function __construct() {
 $this-&gt;beforeFilter('csrf', array('on' =&gt; 'post'));
}
</code></pre>

blocks|key|3039315|text|好的。我想我解决了。我检查了请求是否是邮寄的。不知道这是不是不好的做法。我将filter.php中的csrf过滤器更改为|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3039316|Route::filter('csrf',+function()
{
++++if+(Request::getMethod()+==+'POST'+&&+Session::token()+!=+Input::get('_token'))
++++{
++++++++throw+new+Illuminate\Session\TokenMismatchException;
++++}
});|code-block|syntax|javascript|3039317|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

OK. I solved it i guess. I checked whether the request was post or not. Don't know whether this is bad practice. I changed the csrf filter in filter.php to 

<pre><code>Route::filter('csrf', function()
{
 if (Request::getMethod() == 'POST' &amp;&amp; Session::token() != Input::get('_token'))
 {
 throw new Illuminate\Session\TokenMismatchException;
 }
});
</code></pre>

blocks|key|3039341|text|您可以创建一个运行标准CSRF过滤器的自定义过滤器，但只能在这样的POST请求下运行.|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3039342|Route::filter('csrfIfPost',+function($route,+$request)+{
++++if+($request->getMethod()+==+'POST')+
++++++++return+$route->callFilter('csrf',+$request);
});|code-block|syntax|javascript|3039343|然后在任何你想使用它的地方，只使用过滤器'csrfIfPost‘而不是'csrf’。|3039344|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

You can create a custom filter that runs the standard CSRF filter, but only on POST requests like this...

<pre><code>Route::filter('csrfIfPost', function($route, $request) {
 if ($request-&gt;getMethod() == 'POST') 
 return $route-&gt;callFilter('csrf', $request);
});
</code></pre>

Then anywhere you want to use it, just use the filter 'csrfIfPost' instead of 'csrf'.

I am using restful controllers. I need to run some filters like auth and custom permissions on them. So I put them in a route group and set filters on that group. In addition I also want to run csrf filter but only on post requests. How to do this in the route group?

Added code for clarification

<pre><code>Route::group(array('before' =&gt; 'auth|allowed|csrf'), function() {
 Route::controller('controller', 'SomeController');
 Route::controller('othercontroller', 'OtherController');
});
</code></pre>

I want the csrf only on post routes. I really don't want to add a filter on every controller (there are quite a few);

Laravel filter on route group but only in post requests

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我在使用restful控制器。我需要运行一些过滤器，如auth和自定义权限。所以我把他们分成了一个路由组，并在那组上设置过滤器。此外，我还想运行csrf过滤器，但只对post请求。如何在路线组中做到这一点？添加澄清代码Route::group(array('before' => 'auth|allowed|csrf')...

问在路由组上使用Laravel过滤器，但只在发送请求时使用
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在路由组上使用Laravel过滤器，但只在发送请求时使用EN