[jmccunep]

For the latest x-cart security vulnerability patch, issued today, can the patch files and SQL be applied as is? Or with the Ability template were some of the files that have to be patched modified so one must therefore use the (tedious!) manual DIFF file patch process?

The patch in question (for xcart 4.4.5 version) is:
security-patch-2015-04-28_4.4.5.zip

There are mostly PHP files in this patch, and a couple of TPL files.

[I understand a file compare tool can be used to help answer this question. While I understand the comparison concept, it's not clear how to use it in this context.]

THANKS!