I've been working on mmerch.com which is an e-commerce platform. Along with the marketplaces vntge.net and sstitch.com which are all built on the same platform and all targeted at specific niches.
Seriously, that's some of the best feedback I've gotten from anyone. Thank you. I'll definitely look into implementing those changes.
You can get to the shipping settings from the general settings page. Right now you create shipping rules which are based on price and weight that you can assign to specific countries. There is no integration with FedEx, UPS, or USPS yet but in previous versions I had spent some time integrating their shipping rate and shipping label api's which I plan on adding back soon.
Right now we're focused on smaller shops, price wise we offer a lot more features, multiple payment gateways, complete custom themeing and also marketplaces that you can showcase your products in for no additional cost. VNTGE.net is the first marketplace that's been built for vintage and antique goods.
*First as in first mmerch marketplace, not first ever.
The one place lacking with customer support for Amazon is Amazon FPS. I actually had to completly abandon my integration because the support wasn't there. The only way to get support was via an outsourced forumn and responses would take days if one was ever recieved at all. Response times like that make it way to risky to use for payments.
It's a very nice looking site, but I'll be honest I was logged into Facebook at the time and it really creeps me out when I see my face shown on other sites I didn't log into. But perhaps thats just me.
At the moment we have no protection to stop any brute forcing. But we also make it so that you can't delete or edit a jot once it's made, it simply just expires depending on the expiration time you set (Default is 5 days). We did this with the general thought that you shouldn't put anything online that you wouldn't want anyone else to see, but it's all anonymous so regardless of if someone see's your jot chances are it wouldn't make sense to them since they don't have the context.
Sending a person a link works great when you actually know the person and have some sort of online contact with them. But if you're dealing with someone who you don't really know and don't want to give your person info (email address) to then just giving them a password would work better....but I think adding links would be a good idea as well.
Na this wasn't made during djangodash we're not that hip :(
With regards to the insecure password, the password itself is supposed to be simple, something you can easily tell someone that will stick in their head. Under options you can also enter the last 4 digits of the recipients phone number for added security. But it's not necessarily meant as a way to keep people out, if thats what you want to do you can always set a much longer password.
Yea you can just try to guess the passphrase, but if you want to make it harder you can always use a passphrase + the last 4 digits of their phone number under options. The difference between the passphrase and the custom url key is that at least for me a passphrase is alot easier to pass along. Just telling someone the password is 'house' and them having to put in their phone number is easier to pass along to a non-technical person then a custom url.