                }elseif(!in_array($k, $arr) && $k != 'paging'){
                    //self::error('404');
                }else{

                    self::incFront('default');

                }

            }

        }else{

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.