Mickhansen

The issue concerns SQL Injection where user input is passed into the `limit` or `order` parameters of sequelize query calls, such as `findOne` or `findAll`. This allows a malicious user to inject their own SQL statements.