non-parameterised queries

[SamerElaila]

MWM-Shop_Project/src/database/queries.js

Line 45 in e761e4d

const sql = 'DELETE FROM cart WHERE product_id ='+id;

here you are not protected from sql injection.

see this for more information

[MahmoudMH]

ok done soon