So it turned out that a fixed token for add to cart makes trouble with cached product modules. Actually a token check for "add a product to a cart" has no scenario to be exploited, but I just wanted to fullfill the JED requirements. It cant hurt, right? But it can. If a product module is cached with a token for one session, it cant work for any other session. Therefore I alread added a js script, which adds a token dynamically. But this script did not work on any template, so I did two things. The selector of the script is longer and should get any vm form and second, the add to cart js script itself adds the token. There is no harm doing that, because the token is in the Virtuemart js object, which is used by the script. It could be also plain in the form and the script could use it.
The second little fix is the params of the function onstoreplugintable. I accidently extended the param list, not in the plugin, but in the parent, which creates problems with some plugins. So to prevent problems with some plugins, I just reverted it back, it was anyway not intended.
and last but not least, I enhanced the display of the custom form fields. It looks a lot cleaner now.
