Quote:
Originally Posted by Boofo
Is there anyway to check if the browser handles js and use the regular link for those occasions that it doesn't?
|
The browser does handle js. If I remove the following code from FORUMDISPLAY.PHP it works properly:
Code:
// Prevent CSRF. See #32785
$vbulletin->input->clean_array_gpc('r', array(
'markreadhash' => TYPE_STR,
));
if (!verify_security_token($vbulletin->GPC['markreadhash'], $vbulletin->userinfo['securitytoken_raw']))
{
eval(standard_error(fetch_error('security_token_invalid', $vbulletin->options['contactuslink'])));
}
So it is something with the CSRF protection (this issues started with vB 3.8.5 when they put CSFR protection on the Mark All Read function.)