Hopefully you can help with my issue though I have read your concerns of using 3.6.6 or higher.
GLA seems to be working but something is wrong with the display of Who's online.
My last full install was 3.6.4, I patched it when the exploit was found and 3.6.5 came out.
http://www.vbulletin.com/forum/showthread.php?t=221905
Patch: A second option is to download the patch files discussed in this thread and upload them to your web server, overwriting the existing files. The patch is available from the
Members' Area patch page or you can find it attached to this thread.
Then I was out of town in May and came back when 3.6.7 was released. I saw 3.6.6 was out but didn't upgrade. Instead I just used the plugin patch of 3.6.7.
http://www.vbulletin.com/forum/showthread.php?t=229950
Plugin: The plugin system built into vBulletin 3.6 allows the problem to be fixed with a simple plugin. The install file for this plugin is also attached to this thread and is the easiest way to fix the problem, as it does not require you to upload any files via FTP. The plugin will be automatically removed when you perform your next full upgrade. You can install the plugin by following the instructions
here.
Plugin File: vb_calendar366_xss_fix_plugin.xml
Now I know in the perfect world a full upgrade to 3.6.7 would be best but with the number of hacks I have that is a 5+ hour project! Either way I am protected from the exploits found by the vBulletin team.
Now on to my problem with this hack.
First I checked the session table and the three additional fields country_iso2/3 & country are being populated!
Secondly I added $session[country] to a template and it did return my country properly.
Clearly the GLA product is working with a patched 3.6.4 vBulletin.
My problem is the display of Who's Online as I mentioned above.
Please see the attached screenshot. The column is being added but there is no column title nor any country information. Also note if someone does have IM information it's being placed in the new title-less column, not the IM column.
I have only one hack that modifies the WHOSONLINE template and that is a spider hack which divides up guests & spiders.
Other plugins working with any other related online.php hooks are either online_location_process or ..._unknown only.
Thanks in advance.