A security token was missing or mismatched.

[Chuck S]

Okay so we where posting at the same time

Well lets see here. You turn off some vb hack and then Photopost works fine so this is not a photopost issue then it has to do with that hack. You just proved that here by turning off that hack and things work fine. You would need to work with that hack author to get his stuff working right as it would appear Photopost is operating without issue with vb 3.7 provided your not doing some hacks. Photopost does not have anything to do with you vb search either so not much I can respond to about that.

[Niyuka]

Originally Posted by Chuck S

Okay so we where posting at the same time

Well lets see here. You turn off some vb hack and then Photopost works fine so this is not a photopost issue then it has to do with that hack. You just proved that here by turning off that hack and things work fine.

But This is what http://infernotechnologies.net company told me:

Iain says:
I asked ZT about it

Iain says:
he said photopost doesn't integrate properly with VB

Iain says:
so it won't work, theres not much we can do about it

Iain says:
you'd have to ask those guys to fix the mod basically

and what proves that their addon works great is that all my custom skins and addons are fixed, u can try on a testing forum if you have 3.6.10 , and let say for example u used satelite skin, u won't be able to delete thread unless u put that addon ^

So when i enable it my forums skins work perfect, but the gallery not. and vise versa if i disable this addon.

So you told me that it is this addon that was causing it so they need to update their addon ? well it works on everything just not the photopost

and they told me that the addon is good and photopost need to update their softare to vb 3.6.10


So i really don't know ;(

[Chuck S]

Your relying here on your hack author to tell you what he thinks is correct.

However what I am saying is this. If you run a stock vbulletin 3,7 and Photopost Pro you have already seen Photopost works fine.

In fact your issue begins when you enable his hack. This does not mean Photopost has an issue at all since we seem to work fine with no problems with a stock vb 3.7

This is what you need to explain to him that our software does not have any issues when running without his hack and simply integrating with your forum. I have shown this on my site. You have confirmed this by turning off his hack and seeing your gallery work fine.

I cant speak on your custom themes or anything since those are not Photopost but the issue here seems to be his hack because while he has provided you updates to make his hack fix your themes etc it breaks our gallery operation. This is his issue since without his hack our application runs fine with vb 3.7

I dont mean to pass the buck here but I have tested our pro 6.02 gallery with vb and it runs fine.

[Niyuka]

Hey Chuck, well can you help me with this matter ? I don't know.. like try to let me know what to do so photopost would work with this addon, so that i could have both working , gallery and that addon.

I don't know but this mod has been proven over vbulletin.org to work on every single mod and addon even skins but it doesn't for some reason for photopost.

Also

I want to mention does photopost uses CSRF protection ? because if not then there is a a security vulnerability. Which means it needs to be added right ?

[Niyuka]

So I think it need an update anyways because if it doesn't have SCRF protection then wouldn't that put those who use photopost in a vulnerability ? Right ?

[Niyuka]

Nvm I've fixed all my custom skin issues! and the gallery is working with it but i am still curious , did you guys add that CSRF protection ? because if not wouldn't that cause a vulnerability.

[Chuck S]

No we are not vb software and not prone to whatever coding bugs they may have with their software. We have our own security and injection double checking in our own software.

[Astaran]

But there's no CSRF protection in the code, as far as I can see. So photopost seems to be vulnerable to this kind of attacks - as are many other web applications.

[Niyuka]

Originally Posted by Astaran

But there's no CSRF protection in the code, as far as I can see. So photopost seems to be vulnerable to this kind of attacks - as are many other web applications.

That is what I think too and vbulletin told me since photopost integrates with vb. So it needs that CSRF protection or it wouldn't have asked for it in the first place.

[Chuck S]

It is not for me to say what may or may not be a possibility or what Michael might do with the application in the future or add etc.

I am merely staying on target here with the support issue to respond noting that there is no issues with Photopost Pro working with vbulletin 3.7 which I have tested confirmed and even you yourself have confirmed. Your issue arises out of a hack you installed.

[Niyuka]

Ya it is working fine now because I took out this CSRF protection addon, which i shouldn't because it add protections to my custom skins and everything else, so i did it manually and it was a lot of work. But still I would like to see an update for photopost since this become now a security problem and most users upgraded to either 3.6.10 or 3.7.0 to prevent such thing. And both version have the CSRF protection.

Inferno rpg upgraded their product, other site too. So this one need to be updated and the security protection needs to be added. Can you forward this to Michael if he is the one who created photopost because this issue needs to be taken in consideration.

best regard.

[wd4x4]

You could have just disabled CSRF addon, Upgraded gallery then re-enable your CSRF addon. Worked for me add I had same problem.

[Chuck S]

I am running vbulletin 3.7 and our Photopost Pro 6.02 and see no issues with this though. Other users as well have commenting they have no issues using Photopost Pro with vbulletin 3.7.

Your free to post a suggestion to the developer for consideration on adding future additions to the software considering CSRF but from a support perspective I am not seeing any issues with using our gallery with vbulletin 3.7. If there is something myself or any of the numerous users running vb 3.7 that have commented saying Photopost Pro works with vb 3.7 without issue please do let us know.

[Niyuka]

Ya the gallery is fine now, the gallery works great and i love it but it has a security hole that needs to be fixed. So photopost that run on 3.6x or 3.7.0 needs that security CSRF to be added to it.

[Chuck S]

well I emailed Michael but as noted it seems our gallery seems to work fine with these two versions without any modification. However I am sure he would gladly look into any new functionality for a future release.

[Niyuka]

Thanks Chuck also i noticed that the gallery can't keep jap names, let say if i create an album with this name for example " 最新动画海报大图欣赏 " i don't get that name, is there a language pack that i can install or something ?

[Chuck S]

We dont release a japanese language pack so I would assume you would need to make one or at the very least modify your language file in the languages directory to at least load the proper meta charset to support display of japanese

[Niyuka]

Hey Chucks thanks. well i have another question, u know the side bar that show the "top posters" in the gallery index ?

The top posters names appears when i go inside one of the gallery sections but the main gallery index, the top posters name do not show up same thing with "highest rate"

what can i do to make the top poster users' name and higest rate names appear on the index page ?

the bad show in the index page already but i see no names only when i go inside a the gallery sections i see those names.

[Chuck S]

Can you please provide a link so I can see your site.

Highest rated image might not show any title if there is no title on the photo.

As far as top posters you should see a name I would assume but lets see some links and let me respond accordingly

[Niyuka]

ya it shows now! weird, may be it needed time to update =]