I found the problem was, that the session token was not transferred propeprly for the upload. This results in looking like an anonymous upload to the server which has to be blocked. Unfortunately this hits another bug which did not display a propper error message but rather this "missig "success" message, that does not really help diagnosing the problem.
I certainly would have to do a file difference analysis to say for sure, but I think it was all solved with changing
Code: Select all
JRequest::checkToken( 'request' ) or jexit( 'Invalid Token' );against
Code: Select all
JRequest::checkToken( 'get' ) or jexit( 'Invalid Token' );at several places in "category.php".

