sql injection notes — ShopperCove