This is my code:
$(document).on(\'change\', \'#tblhotel-int_zone_id\', function(e){
var zoneId = $(this).val();
var form_data = {
zone: zoneI
Note: See the answer from Skullcrasher to fix the issue in the correct way as my answer suggests disabling the Cross-Site Request Forgery.
You have a problem with enableCsrfValidation. To read more about it you can read here.
To disable CSRF, add this code to your controller:
public function beforeAction($action) {
$this->enableCsrfValidation = false;
return parent::beforeAction($action);
}
This will disable for all actions. You should probably, depending on the $action, disable it only for specific actions.