	public static function types_update($array)
	{
		global $DB;
		global $website;

        $array = array_filter($array);
        sort($array);

		$array = serialize($array);
				
		$ok = $DB->execute('
		    UPDATE nv_websites
               SET block_types = '.protect($array).'
			 WHERE id = '.$website->id
        );
					
		if(!$ok)
			throw new Exception($DB->last_error());
							
		return true;
	}

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.