Mal's ecommerce is OK. I don't believe that it supports online CC processing and to accept payments, your customers are taken offsite similar to PayPal payment processing except you have options for PP, echeck, your own merchant account, etc. I am not sure that Mal's is PCI compliant. Being taken offsite for payment is one of the highest reasons for cart abandonment, so seriously consider that if you choose a payment option that takes your customer offsite.
If you are looking for ecommerce, accepting credit cards in a traditional sense (not via PP) using your own merchant account & payment gateway as well as PayPal, etc, one thing to be certain is that your host is PCI compliant and will work with issues when/if you fail the required quarterly PCI scans. Many will tell you that you cannot become compliant in a shared server environment, but that's just a bunch of baloney.
Our previous host refused to make changes to their hosting setups that were required for us to pass a quarterly scan. We changed hosts to one who works closely with one of the Approved Scanning Vendors and went from a punchlist of over 100 items to a passing grade on the first scan. Using a host who works with the scanning vendor sure helps when you might have a 'false positive' in your scan. We could pay for the 'special' scanned daily logo but opt to have the scans performed daily and receive a quarterly certificate.
Also important is the cart software that you plan to utilize. If you are not using ecommerce software that is certified PCI compliant, then you are on your own to correct PCI compliance issues (and the rules change as security incidents are discovered)
I know that McAfee gets quite a bit of bad press when it comes to personal virus scanning software but their name is well recognized and many well recognized ecommerce sites use their PCI scanning services. Because of consumer name recognition, that is one of the main reasons we chose to use a McAfee certified host who includes quarterly scans at no additional charge.
I'm not sure that Grumble etiquette allows me to give the host name due to advertising.
Setting up an ecommerce site can be very challenging and regardless of what anyone will advertise, it is not a 30 minute setup and you're done. You may input your business information and pick a template in that time, but setting up items will take time.
