                foreach ($post as $p) {
                    if ($p->id != $id) {
                        $title = (strlen($p->title) > 34) ? substr($p->title, 0, 34).'...' : $p->title;
                        $img = self::getImage(Typo::Xclean($p->content));
                        if ($img != '') {
                            $img = Url::thumb($img, 'square', 200);
                        } else {
                            $img = Url::thumb('assets/images/noimage.png', '', 200);
                        }
                        $related .= '<li class="list-unstyled col-sm-3 col-md-3 clearfix"><a href="'.Url::post($p->id).'">
                        <img src="'.$img.'" class="img-responsive center-block">'.$title.'</a></li>';
                    } else {
                        $related .= '';
                    }
                }
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.