sorry to be blunt but r u kidding me...he forgot to remove the test code..who knows what kind of data is being stored...is credit card data even encrypted ?...instead of writing these blogs and getting this kind of publicity on HN...please have responsibility to use SSL before providing credit card functionality..
I for once just want to say that claps to them for figuring this out , nailing it down in fixing it in just few days. After reading this if feels like issue at such massive level can take large amount of time to fix.