diff --git a/static/src/js/utils/csrf.js b/static/src/js/utils/csrf.js
index 6a004b4..0e21e0f 100644
--- a/static/src/js/utils/csrf.js
+++ b/static/src/js/utils/csrf.js
@@ -11,7 +11,7 @@ define("csrf",function(){
     }
     function csrfHeader(){
         // jquery的请求
-        if(arguments.length == 1) {
+        if(arguments.length == 2) {
             arguments[0].setRequestHeader("X-CSRFToken", get_cookie("csrftoken"));
         }
         // 百度webuploader 的请求
diff --git a/static/src/js/utils/uploader.js b/static/src/js/utils/uploader.js
index ec418c5..83c2b1f 100644
--- a/static/src/js/utils/uploader.js
+++ b/static/src/js/utils/uploader.js
@@ -1,20 +1,23 @@
-define("uploader", ["webuploader"], function(webuploader){
-    function uploader(selector, server) {
-        return webuploader.create({
-
+define("uploader", ["webuploader", "csrf"], function(webuploader,csrf){
+    function uploader(selector, server, onSuccess) {
+        var Webuploader=  webuploader.create({
+            auto: true,
             // swf文件路径
-            swf: "/js/Uploader.swf",
-
+            swf: "/static/img/Uploader.swf",
             // 文件接收服务端。
             server: server,
-
             // 选择文件的按钮。可选。
             // 内部根据当前运行是创建，可能是input元素，也可能是flash.
             pick: selector,
-
             // 不压缩image, 默认如果是jpeg，文件上传前会压缩一把再上传！
-            resize: false
+            resize: false,
+            uploadBeforeSend : csrf
         });
+        Webuploader.on("uploadBeforeSend",csrf);
+        Webuploader.on("uploadSuccess", onSuccess);
+
+        return Webuploader;
     }
+
     return uploader;
 });
\ No newline at end of file