I was asked to make a web site with a shopping cart on it. I have a shopping cart for *NIX based servers called commerce-cgi, and is used with a "flat-file" database. The web site is here: http://www.commerce-cgi.com/ I might try this, but I have not really seen any more open source shopping carts that are decent, so I might have to look commercial for this guy.

Problem is, this guy does not have a lot of money to play around with, and was wondering what shopping carts you guys/gals know about that do a nice job, that is scalable, is easy for the user to update, and has decent security? Or should I tell the guy he needs to buy a decent shopping cart (I have seen some that are VERY expensive)?

Thanks for helping a guy out