419 page expired error in laravel form submission even after adding csrf-CodePudding

 <form action="/checklogin" method="post" enctype="multipart/form-data"  id="login_form_order_page">
              {{ csrf_field() }}                       
              <div ></div>
              <div >
                 <input type="text" name="email"  placeholder="Email*" required>
              </div>
              <div >
                 <input type="password" name="password"  placeholder="Password*" required>
              </div>
              <div >
                 <button type="submit" id="login_btn" >Login</button>
              </div>
              <div >
                 <div >
                    <div >
                       <input type="checkbox" name="remember"  id="remember">
                       <label  for="remember">Remember Me</label>
                    </div>
                 </div>
                 <div >
                    <a  href="/register">Create New account?</a>
                    <a href="login/forget-password">Forgot Password?</a>
                 </div>
              </div>
              <div >
                 <div >
                 </div>
              </div>
           </form>


Route::POST('/checklogin', 'HomeController@checklogin');

I am submitting the form with csrf still after submitting form 419|Page Expired Error. After adding session_start() method on page it shows headers already sent.

CodePudding user response：

hello This error is due to csrf token not being sent or I think this warning is due to session

step 1 : add csrf like @csrf

step 2 : create session like session('key', 'default');

If it doesn't work add meta tag <meta name="csrf-token" content="{{ csrf_token() }}">

If it still doesn't work php artisan cache:clear

I hope your bugs will be solved soon

CodePudding user response：

This can happen sometimes when you have a webpage left open on your browser without any activity for 2 hours. Your session ends up expiring and the CSRF token becomes invalid/expired.

As the other commenter suggested, you can use the blade directive @csrf to replace the other code here: {{ csrf_field() }}

Otherwise you can try clearing cache php artisan cache:clear or also try running composer dump-autoload