To secure one of the X-Cart pages that is outside the “normal” secure area of X-Cart….do the following:
Open https.php in the X-Cart root.
Find this line (around line 44): $https_scripts = array();
Change it to include the pages that need to be secure, for example:
$https_scripts = array(‘help.php’, ‘section=contactus’);
This is especially useful if your site is scanned by McAfee and unsecured forms will trigger an vulnerability.

