The Discount model contains a validProducts field that allows a discount to only apply when specified products have been added to an order. Currently there is no code in place to check this. Any discount code used when placing an order will be applied to your order regardless of what products are in your order.
Either remove the validProducts field from the Discount model, or implement the functionality suggested by it's presence.
Reported by sherbang