    public static function modMenu()
    {
        $json = Options::v('modules');
        $mod = json_decode($json, true);
        //$mod = self::modList();
        //print_r($mod);
        if (is_array($mod)) {
            $list = '';
            asort($mod);
            foreach ($mod as $m) {
                # code...
                if (self::exist($m)) {
                    $data = self::data($m);
                    if (isset($_GET['mod']) && $_GET['mod'] == $m) {
                        $class = 'class="active"';
                    } else {
                        $class = '';
                    }
                    $list .= "<li $class><a href=\"index.php?page=mods&mod={$m}\" >".$data['icon'].' '.$data['name'].'</a></li>';
                }
            }
        } else {
            $list = '';
        }

        return $list;
    }
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.