    public static function getURI () {
        $uri = $_SERVER['REQUEST_URI'];
        // echo $uri;
        // strip any $_REQUEST variable
        $uri = explode('?', $uri);

        if (count($uri) > 0) {

            unset($uri[1]);

        }
        // print_r($uri[0]);
        if (self::inFolder()) {

            $uri = self::stripFolder($uri[0]);


        }else{

            $uri2 = explode('/', $uri[0]);
            unset($uri2[0]);
            $uri = implode('/', $uri2);

        }
        $uri = (Options::v('permalink_use_index_php') == "on")?
            str_replace("/index.php", "", $uri): $uri;
        return '/' . trim($uri, '/');
    }

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.