On the storefront, ajax is used for:
a) (Since v1.5.3) During checkout (and as long as the PA-DSS-ajax-checkout setting in the Admin is enabled), if the selected payment module collects credit-card numbers on-site (ie: authorize.net AIM and paypal payments pro, and others if they are coded suitably), ajax is used to load the next page (checkout_confirmation) of checkout so that the card numbers aren't transmitted back down to the browser for the final step of checkout. This avoids putting that data at risk of unauthorized interception. Requires that a corresponding tpl_ajax_checkout_confirmation_default.php be created/updated to match any customizations made to tpl_checkout_confirmation_default.php, if any.
b) (Since v1.5.3) By any plugins that are written to work with the ajax infrastructure. The only one I know of which uses this is Quick Order: https://www.zen-cart.com/downloads.php?do=file&id=375
In zc_install (since v1.5.5), ajax is used to make the background system-checking more seamless, and to make the installer stateless.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.