3 ms·

Thanks for posting this. I haven't seen much about Magento on HN, though it's got a ton of potential for ecommerce startups. Unfortunately its development has b

by scorxn 18y ago

Thanks for posting this. I haven't seen much about Magento on HN, though it's got a ton of potential for ecommerce startups. Unfortunately its development has been pretty rocky so far. I added this post to their bug tracker. I think someone could do very well offering Magento as a hosted service once it matures. Server administration is the cause of a lot of strife, and few online retailers are interested in that.

streety 18y ago
It's surprising, and a little disappointing, that the original author had not already submitted it. I've not played around with Magento but my understanding is that it's based on the Zend Framework. Zend_Form has a dedicated element for preventing CSRF attacks: Zend_Form_Element_Hash. That said this looks more like a poor design choice rather than a limitation of the tools/framework used.
- leftnode 18y ago
  You're right, I should've submitted it. I did and the dev's said they'd look into it.