SQL Injection Attacks

mongo-sql is vulnerable to SQL injection attacks. This is possible because some values in order.js are not escaped before being made into a SQL statement...