[eliot]

I'm still waiting for my email - I only heard about this because of websitecm's newsletter mentioned something about a recent security upgrade. (Many thanks to websitecm).

Anyway, what's not clear to me is are the diff files in a good state to use yet? I have a root install of x-cart 4.1.8 so if they are still hardcoded for /xcart dir then I guess not.

---

Are the developers of this product using automated tests? Do they have a dedicated QA team?

I'm assuming no, or if they are they have poor coverage. If they are, please start shipping the tests with the product so we can run them ourselves.

My day job is as a programmer specialising in unit, integration and end-to-end testing enterprise web applications. It surprises me in 2007, that a product as popular as this does not have proper automated test coverage.

Qualiteam, please advise us of your position on this topic and what you are doing to fix this.

I'm building phpunit and selenium tests as I make changes to my x-cart install, and I recommend others do this too.

In the end, I'd like to see qualiteam implement automated testing themselves, and have a continuous integration environment. I'm busy, but if you need help qualiteam, give me a shout and I will help where I can.

Here's an idea for any good OO PHP programmers that have the time:

- Build oo designed cart software with unit, integration, and end-to-end test coverage from the start
- Start simple with version 1.0, don't worry about competing with x-cart, you're looking to charge big and only sell to a few.
- Emphasise this is a *quality* and *tested* product.
- Charge $000s per install or for support - don't charge $00s, thats not your market.