OpenBazaar/OpenBazaar — pull request #389 by sophron (2014-09-03 21:16:58+00:00)
Title: Dummy fix to prevent SQLi vulnerability

This commit here makes SQL injection possible through the SELECT statements.

We should revert back and make the selectEntries method accept a dictionary instead of the raw SQL clause. We should then change the callers accordingly.

Since this will take a while, i made a silly temporary fix that prepares the values in an upper lever.