missed files after installation

I'm trying to apply security measures mentioned in this forum,
but :

1. my /includes does not contain configure.php file
2. my /admin/includes does not contain .htacess file

what should I do!?
is my shop vulnerable?

oops sorry, I'm using v1.3.9 h (latest)

Your store wouldn't work without that configure.php file. It may be whatever program you're using to find these files (which should be an FTP program) is configured not to show you files with certain permissions.

yes, found the configure.php file

but could not find the .htacceess do you think my store is secure without it?

Same answer, I think. Since that version of Zencart includes an .htaccess file in the admin folder, and assuming you haven't removed it, I'd guess you just can't see it. Try using your hosting control panel's file manager.