    public static function data($vars)
    {
        $file = GX_THEME.'/'.$vars.'/themeinfo.php';
        $handle = fopen($file, 'r');
        $data = fread($handle, filesize($file));
        fclose($handle);
        preg_match('/\* Name: (.*)\s\*/Us', $data, $matches);
        $d['name'] = $matches[1];
        preg_match('/\* Desc: (.*)\s\*/Us', $data, $matches);
        $d['desc'] = $matches[1];
        preg_match('/\* Version: (.*)\s\*/Us', $data, $matches);
        $d['version'] = $matches[1];
        preg_match('/\* Build: (.*)\s\*/Us', $data, $matches);
        $d['build'] = $matches[1];
        preg_match('/\* Developer: (.*)\s\*/Us', $data, $matches);
        $d['developer'] = $matches[1];
        preg_match('/\* URI: (.*)\s\*/Us', $data, $matches);
        $d['url'] = $matches[1];
        preg_match('/\* License: (.*)\s\*/Us', $data, $matches);
        $d['license'] = $matches[1];
        preg_match('/\* Icon: (.*)\s\*/Us', $data, $matches);
        $d['icon'] = $matches[1];

        return $d;
    }
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.