    public static function post($vars) {
        switch (SMART_URL) {
            case true:
                $inFold = (Options::v('permalink_use_index_php') == "on")? "/index.php/":"/";
                if (Options::v('multilang_enable') === 'on') {
                    $lang = Language::isActive();
                    $lang = !empty($lang)? $lang . '/': '';
                    $url = Site::$url.$inFold. $lang .self::slug($vars)."/{$vars}";
                }else{
                    $url = Site::$url.$inFold.self::slug($vars)."/{$vars}";
                }

                break;

            default:
                if (Options::v('multilang_enable') === 'on') {
                    $lang = Language::isActive();
                    $lang = !empty($lang)? '&lang=' . $lang: '';
                    $url = Site::$url."/?post={$vars}{$lang}";
                }else{
                    $url = Site::$url."/?post={$vars}";
                }
                break;

        }

        return $url;
    }

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.