AJAX request from Codeigniter view gives an error - php

Question

CSRF protection is enabled.
I have a view
I am trying to insert the shifts to the database table via AJAX.
$('#insert_shift').click(function(e) {
e.preventDefault();
var empty_td = $('.td_shift[data-type=""]').size();
if (empty_td == 0) {
var date = $('#atdnc_date').val() + '-';
var arr = [];
var new_arr = [];
$('.td_shift').each(function() {
//if($(this).attr('data-day') != 0){
var data_type = $(this).attr('data-type');
var shift_atdnc_id = $(this).attr('data-typeid');
var user_id = $(this).attr('data-user');
var new_date = date + $(this).attr('data-day');
if (data_type == 'shift') {
var shift_strt_time = $(this).attr('data-start');
var shift_end_time = $(this).attr('data-end'); // Change new_arr to old
var new_arr = {
'shift': shift_atdnc_id,
'user_id': user_id,
'date': new_date,
'shift_strt_time': shift_strt_time,
'shift_end_time': shift_end_time,
'checkin_time': '00:00:00',
'checkout_time': '00:00:00',
'time_spent': '00:00:00',
'checkin_reason': 'NA',
'checkout_reason': 'NA',
'work_report': 'NA',
'attn_status': 0
};
} else if (data_type == 'attendance') {
var new_arr = {
'shift': shift_atdnc_id,
'user_id': user_id,
'date': new_date,
'shift_strt_time': '00:00:00',
'shift_end_time': '00:00:00',
'checkin_time': '00:00:00',
'checkout_time': '00:00:00',
'time_spent': '00:00:00',
'checkin_reason': 'NA',
'checkout_reason': 'NA',
'work_report': 'NA',
'attn_status': shift_atdnc_id
};
}
arr.push(new_arr);
//}
});
$.post(base_url + 'test_shift/insert_shift', {
a: arr,
csrf_test_name: csrf_token
},
function(data) {
alert(data);
if (data == 1) {
document.location.href = base_url + 'test_shift';
} else {
alert("error");
}
}
);
} else {
alert("Please fill all the shifts");
}
});
If there are only 2 rows of shift, the values are getting inserted. But if there are more, 3 in this case, nothing is getting inserted to db but getting an error in the console.
An Error Was Encountered The action you have requested is not
allowed.
When I did a search on this error I came to know that this is thrown in the case of CSRF issues. But I couldn't find a way to fix the issue. Could someone please help?
UPDATE
When I changed the order of data in the POST the above error has disappeared. But now another one came up.
A PHP Error was encountered
Severity: Notice Message: Array to string conversion
Filename: mysql/mysql_driver.php Line Number: 589
And a database error. The INSERT query goes like this
INSERT into table_name () values ('1','some_value'),('2','some_value2'),Array
The code used to generate the array of items is same but from arr[83] the problem starts. I have tried deleting the tds after 83rd day(which is day 23 in 3rd row) from browser and the code worked. I don't understand what is happening here. The 83rd array got chopped for some reason by PHP(or CI).

Answer 1

The issue is fixed. Some elements(starting from array(83)) of the array that is being passed to the controller by the AJAX POST was getting popped, which lead to a database error. I don't know the exact reason yet but after some research I found this thread. So instead of inserting all values in a single INSERT query I have inserted one employee's one month's shift in one insert query, to be safe.
Modified the javascript to this
$('#insert_shift').click(function(e) {
e.preventDefault();
var empty_td = $('.td_shift[data-type=""]').size();
if (empty_td == 0) {
var num_of_days = parseInt($('.th_day').last().text());
var num_of_users = parseInt($('.user_shift_row').size());
var insert_helper = 0;
var post_finish_helper = 0;
var date = $('#atdnc_date').val() + '-';
var arr = [];
var new_arr = [];
function insert_shift_per_user() {
$('.td_shift[data-inserted="0"]').each(function() {
insert_helper++;
var data_type = $(this).attr('data-type');
var shift_atdnc_id = $(this).attr('data-typeid');
var user_id = $(this).attr('data-user');
var new_date = date + $(this).attr('data-day');
if (data_type == 'shift') {
var shift_strt_time = $(this).attr('data-start');
var shift_end_time = $(this).attr('data-end'); // Change new_arr to old
var attn_status = 0;
var shift = shift_atdnc_id;
} else if (data_type == 'attendance') {
var shift_strt_time = "00:00:00";
var shift_end_time = "00:00:00";
var attn_status = shift_atdnc_id;
var shift = 0;
}
new_arr = {
'user_id': user_id,
'date': new_date,
'shift': shift,
'attn_status': attn_status,
'shift_strt_time': shift_strt_time,
'shift_end_time': shift_end_time
};
arr.push(new_arr);
if (insert_helper == num_of_days) {
$.post(base_url + 'test_shift/insert_shift', {
csrf_test_name: csrf_token,
a: arr
},
function(data) {
if (data == 1) {
arr = []; // clearing the array
new_arr = []; // clearing the new_array
insert_helper = 0;
$('.td_shift[data-user="' + user_id + '"]').attr('data-inserted', 1);
post_finish_helper++;
if (post_finish_helper == num_of_users) {
document.location.href = base_url + 'test_shift';
} else {
insert_shift_per_user();
}
} else {
alert("Error");
}
}
);
} //if insert_helper == num_of_days ends
});
} // FUNCTION insert_shift_per_user
insert_shift_per_user();
//var aa = jQuery.parseJSON(arr);
//console.log(arr);
} else {
alert("Please fill all the shifts");
}
}); //insert_shift ends here