  def destroy_q_page
    Log.add_info(request, params.inspect)

    return unless request.post?

    begin
      Item.find(params[:id]).destroy
    rescue
    end

    # Get $Templates and its sub folders to update partial division.
    @tmpl_folder, @tmpl_q_folder = TemplatesHelper.get_tmpl_subfolder(TemplatesHelper::TMPL_RESEARCH)

    @items = Folder.get_items_admin(@tmpl_q_folder.id, 'xorder ASC')

    render(:partial => 'ajax_q_page', :layout => false)
  end
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.