    public static function getLinkTypes () {
        return Yii::app()->db->createCommand ("
            SELECT distinct(modelName)
            FROM x2_fields
            WHERE fieldName='nameId'
            ORDER by modelName ASC
        ")->queryColumn ();
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.