Can't delete an order after security fix

Am using ZC 1.3.7. Was recently hacked and had XO reload ZC from several days ago. I went through the security fixes recommended, but now I can't delete an order or use the Tools - Define Pages Editor (that is, my changes aren't saved).
I can redefine pages using notepad++ and upload - not a real problem, but need to be able to delete orders.
Any help would be appreciated.

Hi,

are you sure that you made the necessary changes to <your admin_directory>/includes/functions/html_output.php and as this is not a 138 install, did you make those changes by hand, rather than just copying the patch file over the old.

For the define pages problem, are you sure the permissions for the define pages directories are correct. (note you will see a warning in admin if they are not)

I've tested on a stock 137 install, with patches installed and I am not seeing any problems with define pages/deleting orders

Thanks. All the options on the Define Page Status are set to one. I'll do the html output page manually and see if that will fix anything.

see also

http://www.zen-cart.com/forum/showthread.php?t=130921