    public static function run()
    {
        $m = self::match();
        // print_r($m);
        if (is_array($m)) {
            # code...

            $val = self::extract($m[0], $m[1]);
            // print_r($val);
            if (isset($val) && $val != null) {
                return $val;
            } else {
                $val['error'] = '';

                return $val;
            }
        } else {
            $val['error'] = '';

            return $val;
        }
    }
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.