added a note on SQL injections as well
Merge pull request #145 from ahlen/master

added a note on SQL injections as well