diff --git a/application/views/items/form.php b/application/views/items/form.php
index 6aa46b9f9..637ee9056 100644
--- a/application/views/items/form.php
+++ b/application/views/items/form.php
@@ -379,7 +379,7 @@ $(document).ready(function()
 					type: 'POST',
 					url: "<?php echo site_url('items/suggest_custom');?>",
 					dataType: 'json',
-					data: $.extend(request, {field_no: <?php echo $i; ?>}),
+					data: $.extend(request, $extend(csrf_form_base(), {field_no: <?php echo $i; ?>})),
 					success: function(data) {
 						response($.map(data, function(item) {
 							return {
@@ -439,12 +439,12 @@ $(document).ready(function()
 				{
 					url: "<?php echo site_url($controller_name . '/check_item_number')?>",
 					type: 'POST',
-					data: {
+					data: $.extend(csrf_form_base(), {
 						"item_id": "<?php echo $item_info->item_id; ?>",
 						"item_number": function() {
 							return $("#item_number").val();
 						}
-					}
+					})
 				}
 			},
 			cost_price: