  def search
    Log.add_info(request, params.inspect)

    unless params[:select_sorting].nil? or params[:select_sorting].empty?
      sort_a = params[:select_sorting].split(' ')
      params[:sort_col] = sort_a.first
      params[:sort_type] = sort_a.last
    end

    list

    if params[:keyword].nil? or params[:keyword].empty?
      if params[:from_action].nil? or params[:from_action] == 'bbs'
        render(:action => 'bbs')
      else
        render(:action => 'list')
      end
    end
  end
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.