How to Fix 419 Error in Laravel

If you’ve ever had a user complain that they can’t access your site after clicking on a link, you may be experiencing the Laravel post request 419 error. This error is frustrating for both you and your users, but don’t worry – there are ways to fix it! In this blog post, we’ll go over what causes the 419 error and how you can resolve it.

What Causes the 419 Error?

There are two main reasons why you might see the Laravel post request 419 error. The first is that your session has expired. Laravel uses cookies to store information about a user’s session, and if those cookies expire, the user will no longer be able to access your site.

The second reason is related to CSRF protection. CSRF, or Cross-Site Request Forgery, is a type of attack that occurs when a malicious user tries to tricks a legitimate user intosubmit ting data that they did not intend to submit. To protect against CSRF attacks, Laravel includes a CSRF token in each form submission. If this token is not present or is invalid, the user will see the 419 error. 

Fixing the 419 Error Code

Normally, it is because you forgot to add crsf code in a form. You can add either @csrf or  csrf_field()  within a form tag to fix.

<form id="event_form" method="POST" action="{{ route('events.updateFullscores', [$event->id, $drawlist->id, $flight->id]) }}">
@csrf
<div class="table-responsive score-table mb-5">
<table cellspacing="0" cellpadding="0" class="table table-striped">
    <tr>
        <th>Players</th>
    @for ($i = 0; $i < 9; $i++)
        <th class="hole-number">
            H{{ $i+1 }}
            <div class="text-par">Par {{ $event->holes[$i] }}</div>
        </th>
    @endfor
    </tr>
    @foreach ($flight->flightData as $data)
    @if(isset($data->player) && !$data->withdraw)
        <tr>
            <td><b>{{ $data->player->name}}</b></td>
            @for ($i = 0; $i < 9; $i++)
                <td>{!! Form::number('player_'.($data->player_id).'_hole_'.($i+1), $data->holes[$i]->par, array('class' => 'form-control strike_field', 'step' => 1, 'pattern' => '[0-9]*')) !!}</td>
            @endfor
        </tr>
    @endisset
    @endforeach
</table>
</div>
</form>

If you think the issue might be related to an expired session, you can try increasing thelifetimeof yoursessioncookies. You can do this by setting the SESSION_LIFETIME variable in your .env file: 

SESSION_LIFETIME=7200 // 2 hours 

If you think the issue might be related to an invalid CSRF token, you can try regenerating your CSRF tokens. You can do this by running the following command: 

php artisan key:generate // regenerate both application & personal access key

Once you’ve done this, clear your browser’s cookies and cache and try accessing your site again.