First off..nice plug-in. I am new to WordPress and this has been very helpful. I want to point out however that the plug in seems to use hidden fields for the post backs. This turns out to be very easy to edit at the client side (say with IE developer toolbar). I can simply go in and change the value say from $50.00 to $1.00 and then “add to cart” and the cost posts as that. This can of course be “caught” when the actual receipt from paypal comes through, but then you would have to deal with someone saying: “But paypal only charged me $1.00..” I just wanted to point this out. I was wondering how the eshop plugin handles that?