    public static function author($vars, $type='')
    {
        switch (SMART_URL) {
            case true:
                $type = ($type != '') ? $type.'/': '';
                $inFold = (Options::v('permalink_use_index_php') == 'on') ? 'index.php/' : '';
                $url = Site::$url.$inFold.'author/'.$vars.'/'.$type;
                break;

            default:
                $type = ($type != '') ? '&type='.$type: '';
                $url = Site::$url."?author={$vars}$type";
                break;
        }

        return $url;
    }
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.