mwatha/one-click-order — pull request #1 by arsham-f (2013-08-10 00:26:54+00:00)
Title: Fixed SQL injection vulnerabilities

use mysql_real_escape_string() on any user inputs being passed to mysql_query()