> Any advice about where to start looking for information would > be very helpful. Open-source tools would be preferred, of course. > Checkout http://www.oscommerce.com/ . I have not used it yet but am scheduled to do a security review of it soon. -Tony