Ahhhh, I was reading these backwards.  Thanks for straightening that out for me.

It says it on add funds page. but I'll add the info for unregistered users.
It just takes paypal right now.
Adding more soon.

I don't have depth of market data displayed yet. I should have that in later today.
Right now you can just see what the lowest ask and highest bid is.

Yeah I don't think paypal is a long term solution. I just wanted to get the site up. I'm thinking of other funding methods now.

I think he's worried that if someone sees the screen of his computer when he's on the site, it's just too easy to memorize the login information.

Passing the password in the GET string is wrong, but passing the password without hashing it is perfectly acceptable.

As the DB operator, he could easily steal any bitcoins or cash you gave him. There's really nothing to do about that.

I see nothing about associated brokerage fees, etc, on the site.  Care to fill us in?  What's your take?

Final post here for now:
I assume that on the "Withdraw Funds" page we don't need to fill in more form elements than necessary?

Ie, if we want bitcoins back, we just give our BTC address.  If we want a check, we give our mailing address, if we want paypal, we give our email address, but there's no need to give a mailing address or email address to get bitcoins back, right?

It would be great if the form changed per our selections - ie, if you wanted bitcoins, you wouldn't see anything for the USD withdraw options.  If you wanted a check, you wouldn't see the request for paypal email or bitcoin address, etc.  JQuery is nice, or any AJAX tool.

The same goes for the deposit forms.

Also, the site mentions that USD withdrawals are manual.  Are bitcoin withdrawals automated?  What about deposits (of both kinds)?

Added $10, was credited with $9.41.  I assume this is a 5.9% PayPal fee?

You should really add a "buyer's price" indicator to your selling form.  For instance, what if I see that the current low price is $.05/BTC.  I go, "If I beat that, then my offer will be the lowest and someone will take it!"  So, I enter a price of $.0495/BTC.  .0495*1.02=.05049.  So, my price isn't the lowest, and my offer will not be taken up.  If the form informed me of how much I get as well as how much a buyer paid, then I could tailor my offer to beat the current ones and still know how much I'd be making.