I'm sorry, I made a single comment in a single sentance and I fail to see how that's grounds for making informed personal judgements on me.

I've been part of this community for a few years now and have a good reputation as far as my postings go so please don't treat me like some "Perl in 24 hours" newbie.

Yes, I should have expanded on what I said and yes I agree with most of your points on security issues et al - but then the same applies to any online enterprise. Did I say "just install this badly written CGI script and be done"? No. I'd expect any kind of e-commerce operation to be paying tight attention to security on many levels - not just the particular shopping cart code. I'd hope that anyone setting up an e-commerce site wouldn't be quite as naive as to not thoroughly test the security and robustness of the code they're using.