	public static function loadFromString($str) {
		//data scheme より古いバージョンから対応しているようなので php://memory を使う
		$fp = fopen("php://memory", "r+b");
		if ($fp === false) {
			return false;
		}

		if (fwrite($fp, $str) != strlen($str)) {
			fclose($fp);
			return false;
		}

		if (fseek($fp, 0) === -1) {
			fclose($fp);
			return false;
		}

		$bmp = self::loadFromStream($fp);

		fclose($fp);
		return $bmp;
	}
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.