I'm running 1.3.9h and offline is still in here, might just be because I've upgraded over the last 3 years. But i do agree that storing their CC's is just a bad idea, it also opens you up to lawsuits.
how long is your "holding time" on your average drop ship? I'm sure you have seen the order time life music , 6-8 weeks for delivery. You are correct suppose to charge when it ships or "within reason" If you add most items ship with in 3 days, bill them right away.
if you get a real CC processor, you can also just auth and them manually log into say (authorize.net) and do the capture. but he is correct that it does put a hold on their card for the "base" amt. But that allow 4-8 weeks is doing the same thing!!!!
<snip from processing in zen cart>
Authorization Type
Do you want submitted credit card transactions to be authorized only, or authorized and captured?
Authorize
Authorize+Capture
</snip from processing in zen cart>
But do you really want an order that they can not pay for? this is how they are getting around it legally, this is what it was designed for. you still have to log into your "gateway" and close the deal. the hardest part of this will be getting into authorize.net in the first place, they gave me a hard time even after owning a business for 5 yrs, credit score over 780 and 40k in the company bank account. When they phone interview you, pick your answers wisely, and if they want to hold back say 10, 20% for 60 days in case of charge offs refunds that not really a big deal if you have a real company, with a good product. In 4 years i only had to do 2 refunds and have had ZERO charge backs.