Thanks for your help
TigerC10.
I'm still trying to understand why they are recommending
Code:
SESSIONURL + 'securitytoken=' + SECURITYTOKEN
versus simply
Code:
'securitytoken=' + SECURITYTOKEN
if SESSIONURL is normally empty.
As I found out above with the YUI uploader
Code:
"securitytoken":SECURITYTOKEN
works (for me) with CSRF enabled , but
Code:
SESSIONURL + "securitytoken":SECURITYTOKEN
gives me a javascript error.
Maybe I'll have to ask this same question in the CSRF thread in the articles section...
Thanks,
James