1. Ok I though that you were talking about the display of the pay now button on the orders listing page, not about that.
Indeed, we're missing a check here.
Add the code:
$config =& hikashop_config();
$default_status = $config->get('order_created_status','created');
if($order->order_status!=$default_status){
$app =& JFactory::getApplication();
$app->enqueueMessage('The order '.$order->order_number.' cannot be paid anymore.');
parent::listing();
return false;
}
before
if(empty($order->order_currency_id)){
in the file components/com_hikashop/controller/order.php and that will fix the problem.