    public function __construct() {
        if (System::existConf()) {
            new System();
            new Db();
            new Site();
            Token::create();
        }else{
            $this->install();
        }
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.