Someone asked me for advice on getting their first eCommerce site up. Not having done it before myself, I wanted to make sure that I got all parts right before suggesting things.

It's a small web store outfit and they want to process payments the "official way" ie. through merchant account, none of that PayPal stuff. From what I gather, the parts they'll need:
- shopping cart (I'd send them towards an open source solution, Magento maybe?)
- secure server certificate
- payment gateway
- merchant account
anything else?

Also, if anyone is quite happy with their providers in any of the above categories, I'd appreciate recommendations.

Thank you