diff --git a/views/CreateTicketView.php b/views/CreateTicketView.php
index 2c0a3fe..658036d 100644
--- a/views/CreateTicketView.php
+++ b/views/CreateTicketView.php
@@ -11,6 +11,13 @@
     <link rel="stylesheet" href="<?php echo $GLOBALS['config']['ASSETS_URL']; ?>/css/dashboard.css">
     <link rel="stylesheet" href="<?php echo $GLOBALS['config']['ASSETS_URL']; ?>/css/ticket.css">
     <script src="<?php echo $GLOBALS['config']['ASSETS_URL']; ?>/js/dashboard.js"></script>
+    <script>
+    // CSRF Token for AJAX requests
+    window.CSRF_TOKEN = '<?php
+        require_once __DIR__ . '/../middleware/CsrfMiddleware.php';
+        echo CsrfMiddleware::getToken();
+    ?>';
+    </script>
 </head>
 <body>
     <div class="user-header">
diff --git a/views/TicketView.php b/views/TicketView.php
index 86a2145..9859687 100644
--- a/views/TicketView.php
+++ b/views/TicketView.php
@@ -53,6 +53,13 @@ function formatDetails($details, $actionType) {
     <script src="<?php echo $GLOBALS['config']['ASSETS_URL']; ?>/js/dashboard.js"></script>
     <script src="<?php echo $GLOBALS['config']['ASSETS_URL']; ?>/js/ticket.js"></script>
     <script>
+    // CSRF Token for AJAX requests
+    window.CSRF_TOKEN = '<?php
+        require_once __DIR__ . '/../middleware/CsrfMiddleware.php';
+        echo CsrfMiddleware::getToken();
+    ?>';
+    </script>
+    <script>
     // Store ticket data in a global variable
     window.ticketData = {
         ticket_id: "<?php echo $ticket['ticket_id']; ?>",
