"enabled" SQL injection in search
secure password hashing with unsalted MD5
added product images