function _makeExtra($value, $title = '') {
    global $THIS_RET;

    if ($THIS_RET['WITH_TEACHER_ID'])
        $return .= ''._with.':&nbsp;' . GetTeacher($THIS_RET['WITH_TEACHER_ID']) . '<BR>';
    if ($THIS_RET['NOT_TEACHER_ID'])
        $return .= ''._notWith.':&nbsp;' . GetTeacher($THIS_RET['NOT_TEACHER_ID']) . '<BR>';
    if ($THIS_RET['WITH_PERIOD_ID'])
        $return .= ''._on.':&nbsp;' . GetPeriod($THIS_RET['WITH_PERIOD_ID']) . '<BR>';
    if ($THIS_RET['NOT_PERIOD_ID'])
        $return .= ''._notOn.':&nbsp;' . GetPeriod($THIS_RET['NOT_PERIOD_ID']) . '<BR>';
    if ($THIS_RET['PRIORITY'])
        $return .= ''._priority.':&nbsp;' . $THIS_RET['PRIORITY'] . '<BR>';
    if ($THIS_RET['MARKING_PERIOD_ID'])
        $return .= ''._markingPeriod.':&nbsp;' . GetMP($THIS_RET['MARKING_PERIOD_ID']) . '<BR>';

    return $return;
}
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.