关于yii2 _csrf验证【这个是网上看到的】

//js里
1、<input type="hidden" value="<?PHP echo Yii::$app->request->csrftoken; ?>" name="_csrf" >
2、
function getMessage(){
        $.ajax({
            headers:{ 
                "<?PHP echo \Yii\web\Request::CSRF_HEADER;?>":
                    '<?PHP echo Yii::$app->request->csrftoken; ?>' // _csrf验证
            },
            type: 'post', //传输类型
            url: "/site/ajax-message",
            async: true,
            data: {
                start:0
            },
            dataType: "jsonp",
            success: function (data) {
                consolr.log(data)
            }
        });
    }
//PHP里
1、main.PHP
'components' => [
        'request' => [
            // !!! insert a secret key in the following (if it is empty) - this is required by cookie validation
            'enableCookieValidation' => true,
            'cookieValidationKey' => 'cookvalid',
        ],
]
2、控制器中添加：
public $enableCsrfValidation = false;