            $logo = '<img src="'.self::$url.Options::v('logo')."\"
                    style=\"width: $width; height: $height; margin: 1px;\">";
        } else {
            $logo = '<span class="mg genixcms-logo"></span>';
        }

        return $logo;
    }
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.