My website is secure, using https, and I am also using https product links.

2-Step (My referred method)
When a visitor clicks one of these links, it is taken to a NON-SECURE mcssl page (mcssl is removing the https by redirecting to a www). I tested to see if it were possible for this page to "be" secure, by adding an https:// to the front of that url and it DOES show the green secure Lock. So, why does mcssl specifically remove the secure url if it is able to be secure.

1-Step Checkout
I was told by customer service that using 1-step product links instead of 2-step links will remedy this, since the 1-Step form collects customer info so that page HAS to be secure. Well, they ARE CORRECT, that page is secure, however.. when a customer clicks a secure product link on my secure website, mcssl redicrects to a NON-SECURE url first, then redirects to the secure 1-step page. So, even though the page they eventually land on is secure, there was a brief moment of vulnerability.

If this is a new customer, I realize they haven't input credit card info etc, yet so it may not seem critical. But, here are a few areas of concern.

1. Security - Browsers are smart (and so are people). Visitors get alerts from their browsers and mobile devices when "secure" pages send then to "non-secure" pages. Which, as we all know, in the checkout process, seeing one of these alerts, causes fear and presents serious risk... which is LAST thing I assume you would want, as a Shopping Cart company.

1. API limitations - If this communication (between your customer's stores & your payment system) breaks a "secure-connection" then your api will never be able to seamlessly connect for returning customer.
**Example. We offer a subscription product, which means our customers' information is stored on our website to give them access to content based on their orders through 1SC. If a member is logged in and wishes to upgrade their service, they should be able to simply click upgrade (choose an option, confirm the cost) the hit submit, without needing to go back trough the entire checkout process. Since the secured-transfer of information is broken (as mentioned above, mcssl is for some reason specifically removing this secure link) your API will not be able to pass this type of info. This is simply one of many variations of possible options that could help provide better, more secure options for its customers.

Please let me know if you'd like more details.

Most of the various found sets in the database default to 10 results. About 99% of the time I have to then click the drop down menu to select Show 100 or 150 results per page and then click Search again. Given then I probably have to do a dozen times every day, every work day of the year, we're talking about hours of time wasted, not to mention the aggravation.

The only reason I can see to default to only 10 results is to have the load time be faster for the tiny minority of users who have so few orders/broadcasts/affiliates/whatever that they don't need to view any more than 10 search results. However, the load time is already very fast if you have a broadband connection and I imagine nearly all of your customers are on a broadband connection.

Please consider changing the default to at least 100 results per page.

Thanks!

Pop-Ups, if used sparingly and tactfully are not annoying and proven to make a huge difference as a last chance for a special offer in marketing.

The Strategic Pop-Up from 1SC is handy, but unfortunately, doesn't know when a visitor has read our sales page so if we want to offer them a freebie for subscribing, we have to pop-up unexpectedly after a certain delay, possibly distracting the reader from our sales copy.

There are many landing pages out there utilising some sort of script code to detect when a visitor is about to exit or close the window. It would be fantastic if 1SC can offer some similar functionality with their "Strategic Pop-Up"

This would allow an account holder to be able to cancel/suspend their account for a time (or for just as a part of their regular business backups) and know they have ALL the "time consuming work" spent setting up their account, saved and ready to upload when ready to return or if the 1shoppingcart server ever crashed or was hacked.

My idea is the same as for a website whereby you can zip and download all of your data for backup or transfer to another provider. In this case though only as a quick and complete backup option.

Presently it takes hours to download all of the individual settings, emails, contact segmented lists etc, etc. There should be absolutely no need to do this manually like this with today's technology!

Why is a feature like this not already provided?

I am now thinking hard about my setup/backup processes for the future. I shouldn't have to worry about it with a fully featured system like this considering the monthly cost.