    public static function page($vars)
    {
        switch (SMART_URL) {
            case true:
                $inFold = (Options::v('permalink_use_index_php') == 'on') ? '/index.php/' : '/';
                if (Options::v('multilang_enable') === 'on') {
                    $lang = Language::isActive();
                    $lang = !empty($lang) ? $lang.'/' : '';
                    $url = Site::$url.$inFold.$lang.self::slug($vars).GX_URL_PREFIX;
                } else {
                    $url = Site::$url.$inFold.self::slug($vars).GX_URL_PREFIX;
                }
                break;

            default:
                if (Options::v('multilang_enable') === 'on') {
                    $lang = Language::isActive();
                    $lang = !empty($lang) ? '&lang='.$lang : '';
                    $url = Site::$url."/?page={$vars}{$lang}";
                } else {
                    $url = Site::$url."/?page={$vars}";
                }

                break;
        }

        return $url;
    }
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.