question about sql vulnerability

re: http://packetstormsecurity.com/files/131228/wpbusinessintelligence-sql.txt

Hello,
I noticed that your response to this security vulnerability was to limit the number of characters of the input to 32 (line 51 in /wp-business-intelligence-lite/functions.php) Was anything else changed to account for the potential of a sql injection? Would it not be possible for an injection to come from an input that is 32 characters?

https://wordpress.org/plugins/wp-business-intelligence-lite/