    public static function activate($mod){
        $json = Options::v('modules');
        $mods = json_decode($json, true);
        //print_r($mods);
        if (!is_array($mods) || $mods == "") {
            $mods = array();
        }
        if (!in_array($mod, $mods)) {
            # code...
            $mods = array_merge($mods, array($mod));
        }


        $mods = json_encode($mods);

        $mods = Options::update('modules', $mods);
        if($mods){
            new Options();
            return true;
        }else{
            return false;
        }
    }

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.