    public static function scrap($param)
    {
        if ($param != '') {
            foreach ($param as $k => $v) {
                if (is_array($v)) {
                    // print_r($v);
                    foreach ($v as $k2 => $v2) {
                        $data[$k2] = $v2;
                    }
                    // print_r($data);
                } else {
                    $data = [$v];
                }
            }
        } else {
            $data = '';
        }

        return $data;
    }
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.