# Slim CSRF value empty- \[SOLVED\]

**URL:** <https://discourse.slimframework.com/t/slim-csrf-value-empty-solved/2796>\
**Category:** Questions\
**Created:** [November 10, 2018, 8:23am UTC](https://discourse.slimframework.com/t/slim-csrf-value-empty-solved/2796 "2018-11-10T08:23:42Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![supervan1](https://yyz2.discourse-cdn.com/flex030/user_avatar/discourse.slimframework.com/supervan1/32/362_2.png) [@supervan1](https://discourse.slimframework.com/u/supervan1)\
**Post date:** [November 10, 2018, 8:23am UTC](https://discourse.slimframework.com/t/slim-csrf-value-empty-solved/2796/1 "2018-11-10T08:23:42Z")

</div>

Hi.

Im trying to implement CSRF and adding the hidden fields using csrf.field inside the twig file. having some difficulty. Not sure if this is the best effective way in doing this. If you have a better way, please share

Your help will be appreciated. Thanks

Getting empty values, the error, dump within Twig

```php
" <input type="hidden" name="csrf_name" value=""> <input type="hidden" name="csrf_value" value=""> "

```

#### add CSRF to middleware.

```php
$app->add(new CsrfViewMiddleware($container));

```

#### The Guard class gets added to the container interface

```php
Guard::class => function (ContainerInterface $c) {
        return new Guard();
    },

```

#### the class CsrfViewMiddleware

```php
namespace Ti\Middleware;
use Slim\Csrf\Guard;

class CsrfViewMiddleware extends Middleware
{
    public function __invoke($request, $response, $next) {
        $this->view()->getEnvironment()->addGlobal('csrf', ['field' => '
					<input type="hidden" name="' . $this->guard()->getTokenNameKey() . '" value="' . $this->guard()->getTokenName() . '">
					<input type="hidden" name="' . $this->guard()->getTokenValueKey() . '" value="' . $this->guard()->getTokenValue() . '">
				',]);

        return $next($request, $response);
    }
}

```

#### the class Middleware

```php
namespace Ti\Middleware;

use Ti\Support\Auth\Auth;
use Slim\Csrf\Guard;
use Slim\Views\Twig;

class Middleware {

    protected $container;

    public function __construct($container) {
        $this->container = $container;
    }

    protected function view() {
        return $this->container->get(Twig::class);
    }

       protected function guard() {
        return $this->container->get(Guard::class);
    }

    protected function router() {
        return $this->container->get('router');
    }

}

```

#### the CsrftestController class with render testcsrf/testcsrf

```php
namespace Ti\Controllers;

class CsrftestController extends BaseController
{
    public function get()
        {
         // return $this->view($this->response,'testcsrf/testcsrf');
         return $this->render('testcsrf/testcsrf');
        }

    public function post()
        {
              return 'test csrf post... after update button was pressed';
        }
 }

```

#### Twig file with csrf.field testing dump

```php
<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="UTF-8">
        <title>CSRF</title>
    </head>
    <body>
        <form action="{{ path_for('csrfpost') }}" method="post">

            <h4> This test csrf... if you refresh page it will give error... (Not allowed to refresh page)</h4>
            </br> </br> </br>

            <button type="submit">Update</button>
            {{ dump(csrf.field | raw) }} 
            // {{ csrf.field | raw}}
        </form>
    </body>
</html>

```

---

<div class="post-metadata">

**Author:** ![tflight](https://yyz2.discourse-cdn.com/flex030/user_avatar/discourse.slimframework.com/tflight/32/1205_2.png) [@tflight](https://discourse.slimframework.com/u/tflight)\
**Post date:** [November 11, 2018, 5:43pm UTC](https://discourse.slimframework.com/t/slim-csrf-value-empty-solved/2796/2 "2018-11-11T17:43:19Z")

</div>

Perhaps you’ve checked this already, but you might want to inspect `$this->guard()->getTokenNameKey()` or its counterparts in `CsrfViewMiddleware` to see if they have a value at that point. That should help narrow down if the issue is before or after that point.

I’m not sure which version of Twig you are using, but I recall in Twig 2 you can no longer add a global variable after extensions have been initialized.

---

<div class="post-metadata">

**Author:** ![supervan1](https://yyz2.discourse-cdn.com/flex030/user_avatar/discourse.slimframework.com/supervan1/32/362_2.png) [@supervan1](https://discourse.slimframework.com/u/supervan1)\
**Post date:** [November 11, 2018, 8:10pm UTC](https://discourse.slimframework.com/t/slim-csrf-value-empty-solved/2796/3 "2018-11-11T20:10:48Z")

</div>

Hi, Thanks for responding

im already getting null values when i create the CsrfViewMiddleware, I was trying something, hoping this would work

```php
" <input type="hidden" name="csrf_name" value=""> <input type="hidden" name="csrf_value" value=""> "

```

im using  
PHP v7.1.23-3  
ubuntu v18.04.1  
slim/csrf v0.7.0  
slim/slim v3.11.0  
slim/twig-view v2.4.0

---

<div class="post-metadata">

**Author:** ![tflight](https://yyz2.discourse-cdn.com/flex030/user_avatar/discourse.slimframework.com/tflight/32/1205_2.png) [@tflight](https://discourse.slimframework.com/u/tflight)\
**Post date:** [November 12, 2018, 1:45pm UTC](https://discourse.slimframework.com/t/slim-csrf-value-empty-solved/2796/4 "2018-11-12T13:45:45Z")

</div>

Okay, so if you’re getting null in `CsrfViewMiddleware` (I assuming your dumping `$this->guard()->getTokenNameKey()`) then you need to keep moving down the stack. Are you getting the correct class there? So something like `get_class($this->guard()`.

You could also see what you get from your `Middleware` class, obviously you will need to inspect via echo, dump, etc.

````php
       protected function guard() {
          // do we have the correct class?
          get_class($this->container->get(Guard::class));

          // what is the value here?
         $this->container->get(Guard::class)->getTokenNameKey();
    }```
````

---

<div class="post-metadata">

**Author:** ![supervan1](https://yyz2.discourse-cdn.com/flex030/user_avatar/discourse.slimframework.com/supervan1/32/362_2.png) [@supervan1](https://discourse.slimframework.com/u/supervan1)\
**Post date:** [November 15, 2018, 5:43am UTC](https://discourse.slimframework.com/t/slim-csrf-value-empty-solved/2796/5 "2018-11-15T05:43:53Z")

</div>

Hi,

Thanks for your feedback.  
Someone else also had the same problem, seems to be order things get initialized.

Thanks again for your time and guidance

---

<div class="post-metadata">

**Author:** ![supervan1](https://yyz2.discourse-cdn.com/flex030/user_avatar/discourse.slimframework.com/supervan1/32/362_2.png) [@supervan1](https://discourse.slimframework.com/u/supervan1)\
**Post date:** [November 18, 2018, 11:56am UTC](https://discourse.slimframework.com/t/slim-csrf-value-empty-solved/2796/6 "2018-11-18T11:56:16Z")

</div>

Solution : I never register Slim\Csrf to a single route. could have used middleware