    public static function start()
    {
        $url = Site::$url;
        $site_id = !defined('SITE_ID') ? 'Installation' : SITE_ID;
        session_name('GeniXCMS-'.$site_id);
        session_start();
        $uri = parse_url($url);
        // print_r($uri);

        //unset($_SESSION);
        if (!isset($_SESSION['gxsess']) || $_SESSION['gxsess'] == '') {
            $_SESSION['gxsess'] = array(
                                    'key' => self::sesKey(),
                                    'time' => date('Y-m-d H:i:s'),
                                    'val' => array(),
                                );
        }
        session_regenerate_id();
        $path = isset($uri['path'])? $uri['path']: '';
        setcookie(session_name(), session_id(), time() + 3600, $path);
        $GLOBALS['start_time'] = microtime(true);
    }
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.