All versions of PDshop & PDshopPro include built in security features, including one that prevents exploits such as SQL injection.  

The built in Form and Querystring filter scans all data passed in querystrings or in html forms.  If it detects data that is malicious in nature or that does not conform to the proper data type, the page request is aborted and an error message is displayed indicating that the request has been intentionally aborted for security reasons.