Research SQL injection issues and write tests to confirm no issues

[robyurkowski]

@parndt Leaving this one to you as we discussed. Feel free to delegate -- @jadams, we'd discussed that maybe you might have some stuff to say about this?

[knewter]

Oh right so I looked into this, and at least the most naive SQL injections are tested against in hyperion (I didn't look to see how smart they were, but they're in the tests if you look). We should grab rails sql injection tests and maybe beef up the hyperion suite to verify different sorts of injections perhaps? Thoughts?

[parndt]

Yes!