# CSRF Token missing error

**URL:** <https://forum.djangoproject.com/t/csrf-token-missing-error/37440>\
**Category:** Getting Started\
**Created:** [December 23, 2024, 10:47pm UTC](https://forum.djangoproject.com/t/csrf-token-missing-error/37440 "2024-12-23T22:47:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![RamSharma-1](https://sea2.discourse-cdn.com/flex026/user_avatar/forum.djangoproject.com/ramsharma-1/32/25909_2.png) [@RamSharma-1](https://forum.djangoproject.com/u/RamSharma-1)\
**Post date:** [December 23, 2024, 10:47pm UTC](https://forum.djangoproject.com/t/csrf-token-missing-error/37440/1 "2024-12-23T22:47:37Z")

</div>

I am in dev environment and I have a Admin button which when clicked throws CSRF error. I have tried everything in tutorials and forums and documentation. Cant get it to work. Here are the code snippets.

```auto
urls.py
urlpatterns = [
    path('', RedirectView.as_view(url='accounts/login/')),
    path('home/', views.home, name='home'),
    path('upload/', views.upload, name='upload'),
    path('upload_file/', csrf_exempt(views.upload_file), name='upload_file'),
    path('upload_vendor_rate/', csrf_exempt(views.upload_vendor_rate), name='upload_vendor_rate'),
    path('accounts/', include('django.contrib.auth.urls')),
    path('logout/', csrf_exempt(RedirectView.as_view(url='/accounts/login/'))),  
    path('adminsettings/',admin.site.urls),
] 

```

```auto
HTML Form 
<form action="/adminsettings/" method="post" novalidate enctype="multipart/form-data">
  {% csrf_token %}
  <style>
    .top-corner-buttons {
        position: absolute;
        top: 10px;
        right: 10px;
    }
    .top-corner-buttons button {
        margin-left: 5px;
    }
</style>
    
    <div class="top-corner-buttons">
      <button type="submit">Admin</button>
  </div>
  
</form>

```

Settings.py

```auto
CSRF_COOKIE_SECURE=False

CSRF_USE_SESSIONS=False

CSRF_TRUSTED_ORIGINS=['http://localhost:8000']

CORS_ALLOWED_ORIGINS=['http://localhost:8000']

MIDDLEWARE = [
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
]

```

Error

 ![image](https://us1.discourse-cdn.com/flex026/uploads/djangoproject/original/3X/2/2/2224c4891a0226e6027bea9ac94a3eed37cf467b.png)

---

<div class="post-metadata">

**Author:** ![philgyford](https://sea2.discourse-cdn.com/flex026/user_avatar/forum.djangoproject.com/philgyford/32/14295_2.png) [@philgyford](https://forum.djangoproject.com/u/philgyford)\
**Post date:** [December 23, 2024, 11:08pm UTC](https://forum.djangoproject.com/t/csrf-token-missing-error/37440/2 "2024-12-23T23:08:23Z")

</div>

You’ll need to put three backticks ``` on separate lines before and after each code block so that they format correctly.