v1.3.8 "with patches" is not something to hang your hat on. You're still vulnerable: There are some complicated security fixes for 1.3.8 which were NOT released as a separate standalone patch, because they were as much work as an upgrade. SO, they were rolled into v1.3.9.
This is what I recommend:
If you wish to "get the jump" on going to 1.5.0, do your upgrade to 1.3.9 for your site NOW, and then AFTER you've taken that upgrade live, start with preparations to take it to 1.5.0 whenever it's released ... collecting and testing addons etc using the beta and then doing the actual real upgrade using the official version when it's released.
Make sense?
Your second upgrade is always MUCH faster and easier than the first.
The code changes from 1.3.8 to 1.3.9 are easier to identify and customize than they are when jumping from 1.3.8 to 1.5.0. Smaller steps are much easier to take.
Plus, if you have addons that need upgrading for 1.5.0, then at least you buy yourself some time by having your site at 1.3.9 already.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
