question about sql injection patch

Hello,
I noticed that your response to the security vulnerability, which was recently identified, was to limit the number of characters of the input to 32 (line 51 in /wp-business-intelligence-lite/functions.php) Was anything else changed to account for the potential of a sql injection? Would it not be possible for an injection to come from an input that is 32 characters?

https://wordpress.org/plugins/wp-business-intelligence-lite/