I thought I'd share this on the completed mods section:
Thanks to fearnothing for providing this code:
Code:
If you would like to add HTML tags to the "payment_details" field you should open admin/payment_methods.php file and
replace in it:
require "./auth.php";
with
define('USE_TRUSTED_POST_VARIABLES',1);
$trusted_post_variables = array("posted_data");
require "./auth.php";
Those changes do not introduce any security risk, because the list of the payment methods can be changed by x-cart store administrator only.
For more info about pimping your checkout see this topic
http://forum.x-cart.com/viewtopic.php?t=29321&start=30