						$dt = date('Y-m-d', strtotime($match));

					$sql = par_rep("/'$match'/", "'$dt'", $sql);
				}
			}
			if (substr($sql, 0, 6) == "BEGIN;") {
				$array = explode(";", $sql);

				foreach ($array as $value) {
					if ($value != "") {
						$user_agent = explode('/', $_SERVER['HTTP_USER_AGENT']);
						if ($user_agent[0] == 'Mozilla') {
							$result = $connection->query($value);
						}
						if (!$result) {
							$user_agent = explode('/', $_SERVER['HTTP_USER_AGENT']);
							if ($user_agent[0] == 'Mozilla') {
								$connection->query("ROLLBACK");
								die(db_show_error($sql, _dbExecuteFailed, mysqli_error($connection)));
							}
						}
					}
				}
			} else {
				$user_agent = explode('/', $_SERVER['HTTP_USER_AGENT']);
				if ($user_agent[0] == 'Mozilla') {
					$result = $connection->query($sql) or die(db_show_error($sql, _dbExecuteFailed, mysqli_error($connection)));
				}
			}
			break;
	}
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.