added screenshot + sanitized query

Author: bekarice

readme.txt

@@ -1,7 +1,7 @@
 === WooCommerce Filter Orders by Coupon ===
 Contributors: skyverge, beka.rice
 Tags: woocommerce, orders, filter orders, coupons
-Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal@skyverge.com&item_name=Donation+for+WooCommerce+Extra+Product+Sorting
+Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=paypal@skyverge.com&item_name=Donation+for+WooCommerce+Filter+Orders
 Requires at least: 3.8
 Tested up to: 4.1
 Requires WooCommerce at least: 2.2

screenshots/screenshot-1.png

@@ -8,15 +8,15 @@
  * Version: 1.0.0
  * Text Domain: wc-filter-orders
  *
- * Copyright: (c) 2012-2015 SkyVerge, Inc. (info@skyverge.com)
+ * Copyright: (c) 2015-2015 SkyVerge, Inc. (info@skyverge.com)
  *
  * License: GNU General Public License v3.0
  * License URI: http://www.gnu.org/licenses/gpl-3.0.html
  *
  * @package   WC-Filter-Orders
  * @author    SkyVerge
  * @category  Admin
- * @copyright Copyright (c) 2012-2015, SkyVerge, Inc.
+ * @copyright Copyright (c) 2015-2015, SkyVerge, Inc.
  * @license   http://www.gnu.org/licenses/gpl-3.0.html GNU General Public License v3.0
  *
  */
@@ -156,7 +156,7 @@ public function add_filterable_where( $where ) {
 		if ( ! empty( $_GET['_coupons_used'] ) ) {
 
 			// Main WHERE query part
-			$where .= $wpdb->prepare( " AND woi.order_item_type='coupon' AND woi.order_item_name='%s'", $_GET['_coupons_used'] );
+			$where .= $wpdb->prepare( " AND woi.order_item_type='coupon' AND woi.order_item_name='%s'", wc_clean( $_GET['_coupons_used'] ) );
 		}
 
 		return $where;