That post referred to the AJAX rewrite, which has been done...it's been released as a separate 3.7 hack.

I know this to be so, as I have it running on my site.

Ok :p

I got installed 1.2.2 I guess I never received the upgrade email ;)

although I don't see files to download :confused:

Strange... :confused:
now is 1.2.2 again :mad: and the zip is back...

So there's not 1.2.3 despite the fact that is listed on the Change Log?

There is a 1.2.3, but it's only for 3.7 as the only change is the AJAX rewrite....

There's a separate thread for it.

https://vborg.vbsupport.ru/showthread.php?t=181111

Ok I'll be clear :mad:
- so Ok there's one for 3.7 [although 3.7x has its own Tag System]
- here is published in the changelog: "2008/05/01 - 1.2.3 * vBulletin CSRF Protocol Compatible" which I think isn't important for 3.6.x
- I will stay in vB3.6.x for a while so 1.2.2 is the way to go?
- why they removed the .zip and put it back?

There was some confusion at the time, but this is my understanding.

1) 3.6 users need to use the 3.6 version but I now don't know if that has CSRF in it or not. The original copy of version 1.2.2 obviously didn't, but I don't know if the copy that's up there now has changed.

2) 3.7 users like myself who DON'T want to convert to the vB tagging system found that although Zoints tags still worked in 3.7, the AJAX was broken, causing full page reloads whenever you submit or remove a tag. Thbe 3.7 version fixes this and presumably the CSRF.

I cannot confirm the CSRF in 3.7 since when I upgraded, vBulletin's automatic system inserted all the CSRF lines in Zoints for me without any action on my part. But I would assume it's done.

Zoints need to come and clear this up really.

3.6.10 users - apply this patch, and the CSRF issues should be fixed.

https://vborg.vbsupport.ru/showpost....&postcount=913


The 1.2.2 zip included in this thread is only for 3.6.9 and LOWER as per the changelog.

Aaah! some closure!

Just to clear up a few other things. Yes, vBulletin does have their own tag system for 3.7 but each system does provide some different things of interest for forum owners. I apologize I couldn't be of much help but frankly after the ensuing posts, I was a bit confused myself.

As for the file removal, I am not sure how that happened to be honest and no one else is. When I saw your post io, I rushed to get that back up as it definitely is still a viable solution to tagging.

Sorry about the difficulty and I'll make sure to get someone to post the patch in the first post (or in the zip itself) to avoid further confusion. Thanks for being patient.

- Reid

Just to make sure, but zointstags_searchtags template doesn't contain any:

So where do I place the security token fix?