Harald Ponce de Leon, on 16 November 2012 - 11:39 AM, said:
That isn't the point. The point is that XSS vulnerability is a false report and if that company doesn't know better, then I wouldn't use their services. It looks like they will report anything to you just so you can pay a "failure fee".
Ah ha, OK I get it now! Thank you @Harald Ponce de Leon that gives me a good perspective, I will keep that in mind. Makes it a challenge when the bank dictates who is used to monitor my sites PCI compliance.
Thanks @Roaddoctor! Sort order is now Low to High. Only thing i notice is that it picks the lowest FedEx service/cost no matter what instead of default selection to USPS First Class for example, which is lower.
Don't recall if it selected that way before - that's not a big deal for me, but some people may want default to lowest cost overall.
This should solve your problem but post back if not.
I first tried commented out and there was no change. Then moved the "usort" line as suggested but that broke the entire checkout_shipping page.
I wonder if it's just a matter of changing the SQL configuration table? There is a "sort order of display" entry - currently set to a sort order value of 99. Or even just changing the values of the services i'm using. For example, it has all the priority and next day services at a sort order ID of 10, where the Home Delivery or Ground has a value of 25.
But i'm no SQL expert and don't know if that would break the entire module or not?