Forums

"Referer checking failed - https://apps.facebook.com/.../admin/ does not match https://myuser___.pythonanywhere.com/.
In general, this can occur when there is a genuine Cross Site Request Forgery, or when Django's CSRF mechanism has not 
been used correctly. For POST forms, you need to ensure:
The view function uses RequestContext for the template, instead of Context.
In the template, there is a {% csrf_token %} template tag inside each POST form that targets an internal URL.
If you are not using CsrfViewMiddleware, then you must use csrf_protect on any views that use the csrf_token template tag, as  
well as those that accept the POST data."

TEMPLATE_LOADERS = (
    #'django.template.loaders.filesystem.Loader',
    #'django.template.loaders.app_directories.Loader',

     'django.template.loaders.eggs.Loader',
)

MIDDLEWARE_CLASSES = (
    'django.middleware.common.CommonMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    #'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django_facebook.middleware.FacebookMiddleware',
    'django.middleware.transaction.TransactionMiddleware',
)



TEMPLATE_CONTEXT_PROCESSORS = [
    'django.core.context_processors.request',

    ##'django.core.context_processors.auth',
    'django.contrib.auth.context_processors.auth',
]

INSTALLED_APPS = (
    'django.contrib.auth',
    'django.contrib.contenttypes',
    'django.contrib.sessions',
    'django.contrib.sites',
    'django.contrib.messages',
    'django.contrib.staticfiles',
    'django_facebook',

    # Uncomment the next line to enable the admin:
    'django.contrib.admin',
    'mysitet.myfacebookapp',
    # Uncomment the next line to enable admin documentation:
    #'django.contrib.admindocs',
)