PHP/MySQL Site Upgrades

We have 12 updates we would like made to our site. Please review them in the details and bid accordingly. ## Deliverables These UI changes are: ? Column headers not necessary in cart product listing (plenty of space for expanded values like Small instead of S) ? Don't require the user to enter a quantity when adding to the cart (1 should be default) ? Default to Medium - unless no mediums are instock ? Facebook like is a bit misleading. Appears as if it's product specific, but it's probably site-specific since all products have the same number of likes. ? There are slashes showing up in the FAQ section wherever an apostrophe is used (might be a style thing, but I'm guessing not). Use the remove slash function to get rid of this. ? Don't put the info@[login to view URL] email address in plain text on the contact page if you're at all concerned about spam. (consider an image of the email address) ? For some reason it says to 'contact us' for international shipping, but offers the ability to select an international address anyhow. Remove all international addresses from the checkout page. ? Review the US state list; "Federated states of Micronesia" and a few others clearly don't belong in that list. Remove anything outside of the standard 50 states. ? Credit card section asks for first and last name even though there is an entire section called "billing" which already asks for the name. Have this info automatically copy over. ? Consider putting limits on field lengths throughout. Most fields seem to be unbounded. Come up with and put limits on each UI element of the checkout page. ? I can buy a negative quantity of an item as long as the end total is positive. Not surprisingly, credits me the value of the item. Require items to be positive. ? Buying with PayPal is supposed to be easy. User shouldn't have to fill in their name and address, that stuff can come from the PayPal API. If they click buy with PayPal then capture their address, etc, etc, from the PayPal return and don't make them enter the information on the page. ? Place items in the config file into a settings table ? Parameterize all inputs using SQL parameters. Eliminate SQL injection issues.