I am having an issue, probably parse related. Using Solspace Freeform I am trying to include the {csrf_token} in the return path but its not working.. my code is as follows for the form:


It returns to domain.com/segment/%7Bcsrf_token%7D with an error: Error: The URI you submitted has disallowed characters.

I am trying to use the CSRF token to check against buy storing it in a hidden field and using it to display the entry on the return. From this example: http://support.solspace.com/support/solutions/articles/4000032469-how-to-make-freeform-forms-editable-without-using-the-entry-id-in-the-url

Could anyone shed some light or offer a way to do this?

Thanks in advance

  • Have you tried adding parse="inward" to the parameters? May 17, 2017 at 12:35

1 Answer 1


This is likely due to parse order, where the {csrf_token} variable wouldn't be parsed yet until the {exp:freeform:form} tag has fully rendered, which would be after the parameters have been parsed.

  • The example I was following was from the Solspace support so assumed it would work. I just need to show the users details on the return page, not possible?
    – Mark
    May 17, 2017 at 2:56
  • The example solution assumes you're generating your own hash (however you might do it), not using the CSRF token.
    – Solspace
    May 17, 2017 at 3:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.