			$ok = $DB->execute('
 				INSERT INTO nv_paths
				(id, website, type, object_id, lang, path, cache_file, cache_expires, views)
				VALUES
				( 0, :website, :type, :object_id, :lang, :path, "", 0, :views )
				',
				array(
					':website' => $website_id,
					':type' => $type,
					':object_id' => $object_id,
					':lang' => $lang,
					':path' => $path,
                    ':views' => 0,
				)
			);
  			
  			if(!$ok) throw new Exception($DB->get_last_error());
		}

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.