Dear Monks,

I recently stumbled across some issues on a commercial website where I wanted to post an order.

Some functionality of their webshop that used to work did not work at all, and they also had some security related issues (sending credit-card information via plain http in some cases etc).

I complained about these issues and in the ensuing discussion remarked that my impression was that not only their site was poorly implemented (all php ...) but also that they seemed to lack a proper development process that prevented "minor changes" to break functionality in production.

Now they have come back to me basically asking me for recommendations about which software to buy to improve their process...

Unfortunately I am not a web-programmer (and don't use php at all), so I don't really have an overview on what is currently available and to be recommended...

What I believe they need are some open-source tools to both unit-test php-webapps and to implement some automated end-to-end testing of the whole site.

If I had to do it myself I would probably implement some end-to-end testing using WWW::Mechanize but I assume there is much more sophisticated stuff available...

Also I would like to point them so some tutorials/books about how to implement a sensible change-management in a web-context.

Can someone help me out here?

Many thanks!