You allow users to access wishlist like that: http://localhost:51385/sitename/Wishlist.aspx?CustomerID=38 No good idea because i can access any Wishlist in you database just by changing CutomerId in URL So i can check how many customers you have or write simple page that will download all your customers info (names & e-mails) :(
and here is my next question. i downloaded latest ver. and there are some problems with it (like the one with wislist) Is there a place where you list all this small things and post files to change or fixes ? - so people will be able to make fixes before next release. Or i have to wait for next release/try to fix it myself ?