1/ potential sql injection through tag types - missing param type + can add new types + usually no addslashes before update of tags
2/ paging does not work at all
3/ missing param type definitions
4/ not xhtml strict compliant
5/ CSRF - missing sesskey checks
6/ UI code in tag/lib.php - should be in manage.php or other file
7/ missing localization of types - default/standard
It's a very simple first version.
TODO for 1.9:
- Store rawname of each tag as well as normalised version and treat accordingly
- Add blocks to the tag interest pages
