                foreach ($value as $k => $val) {
                    if ($k != 'LAST_UPDATED') {
                        if ($k != 'UPDATED_BY') {
                            if ($k == 'ID')
                                $data['data'][$i]['SCHOOL_ID'] = $val;
                            else if ($k == 'SYEAR')
                                $data['data'][$i]['SCHOOL_YEAR'] = $val;
                            else if ($k == 'TITLE')
                                $data['data'][$i]['SCHOOL_NAME'] = $val;
                            else if ($k == 'WWW_ADDRESS')
                                $data['data'][$i]['URL'] = $val;
                            else
                                $data['data'][$i][$k] = $val;
                        }
                    }
                }
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.