[kangus]

With 3.5.1 I tried the https include before the require's and it fails

But this seems to work.

# $Id: orders.php,v 1.17 2003/08/11 10:44:46 svowl Exp $
#
require "./auth.php";
require $xcart_dir."/include/security.php";

if ($config["General"]["secure_store"]=="Y"){
@include "../customer/https.php";
}

Then add this to the database
INSERT INTO `xcart_config` VALUES ('secure_store', 'Enable Secure Store', 'Y', 'General', 5, 'checkbox', 'Y');

And modify https.php with:

if ($config["General"]["secure_store"]=="Y"){
$https_scripts = array("register.php","cart.php?mode=checkout","ord ers.php","order.php");
}
else{
$https_scripts = array();
}

I move the UNTOUCHED original files into my "patch" backup directory and add them to my "Patch-setup" script - before I patch I copy all changed files from the site with directory paths and replace them with these backups - If I need to, if the file name in not in the file.lst with the patch then the script by-passes the file.