Your whole site/game needs to be under https.
As note, SSLs using sha1 will no longer be recognized with the new version of Chrome
coming out next year.
sha1 has been broke for 4 years that I know of.
Myself, I have to get new cert that use sha2 for my sites so Chrome will accept the SSL.
Sounds more like sql injection got you, nothing to do with the SSL cert.
I hope you have that covered, but sure sounds like you don't.
As note, SSLs using sha1 will no longer be recognized with the new version of Chrome
coming out next year.
sha1 has been broke for 4 years that I know of.
Myself, I have to get new cert that use sha2 for my sites so Chrome will accept the SSL.
Sounds more like sql injection got you, nothing to do with the SSL cert.
I hope you have that covered, but sure sounds like you don't.