	protected function gdImageCreate($path,$mime){
		switch($mime){
			case 'image/jpeg':
			return @imagecreatefromjpeg($path);

			case 'image/png':
			return @imagecreatefrompng($path);

			case 'image/gif':
			return @imagecreatefromgif($path);

			case 'image/x-ms-bmp':
			if (!function_exists('imagecreatefrombmp')) {
				include_once dirname(__FILE__).'/libs/GdBmp.php';
			}
			return @imagecreatefrombmp($path);
			
			case 'image/xbm':
			return @imagecreatefromxbm($path);
			
			case 'image/xpm':
			return @imagecreatefromxpm($path);
		}
		return false;
	}
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.