-Use of prepared procedures would help mitigate this. Add this to the readme.
-While it's explained in the readme NOT to use the root user and that there are no SQL sanity checks, this is clearly not enough and people are not paying attention. Add a check and disallow root user.
-Add in escaping for all queries to attempt to prevent exploits.