# Rails + AJAX + mootools

**URL:** <https://www.ruby-forum.com/t/rails-ajax-mootools/168270>\
**Category:** Rails\
**Created:** [May 19, 2009, 12:58am UTC](https://www.ruby-forum.com/t/rails-ajax-mootools/168270 "2009-05-19T00:58:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![fRAnKEnSTEin](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/f/0ea827/32.png) [@fRAnKEnSTEin](https://www.ruby-forum.com/u/fRAnKEnSTEin)\
**Post date:** [May 19, 2009, 12:58am UTC](https://www.ruby-forum.com/t/rails-ajax-mootools/168270/1 "2009-05-19T00:58:11Z")

</div>

hi there,

I am trying to use rails with mootools, everything just worked great.  
I have a little problem with the ajax thing, because every time i send  
a form with ajax an error occur that said something like  
“authentication token error”. I have read that i need to include  
inside the form a hidden with the authentication token, this approach  
fix the problem and everything worked, but i am not sure if this is  
secure or not? any idea

Regards,

Shirkavand

---

<div class="post-metadata">

**Author:** ![fRAnKEnSTEin](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/f/0ea827/32.png) [@fRAnKEnSTEin](https://www.ruby-forum.com/u/fRAnKEnSTEin)\
**Post date:** [May 19, 2009, 9:29am UTC](https://www.ruby-forum.com/t/rails-ajax-mootools/168270/2 "2009-05-19T09:29:53Z")

</div>

On May 18, 11:57 pm, fRAnKEnSTEin [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> hi there,
> 
> I am trying to use rails with mootools, everything just worked great.  
> I have a little problem with the ajax thing, because every time i send  
> a form with ajax an error occur that said something like  
> “authentication token error”. I have read that i need to include  
> inside the form a hidden with the authentication token, this approach  
> fix the problem and everything worked, but i am not sure if this is  
> secure or not? any idea

That’s fine - if you use the rails helpers it would have included that  
token as a hidden form field automatically.

Fred
