Database query built from user controller sources

[smithcoin]

Hello -

I enabled Github code scanning on our public fork of your repo, and an alert was opened. I figured it would be helpful to know.

You can view that here: https://github.com/digitalmint/scs/security/code-scanning/1