    private function curl($url){
        $ca = curl_init();
        curl_setopt($ca, CURLOPT_URL, $url);
        curl_setopt($ca, CURLOPT_RETURNTRANSFER, TRUE);
        curl_setopt($ca, CURLOPT_HEADER, FALSE);
        curl_setopt($ca, CURLOPT_HTTPHEADER, array("Accept: application/json"));
        $response = curl_exec($ca);
        curl_close($ca);
        //var_dump($response);
        $result = json_decode($response, true);
        return $result;
    }

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.