	public function delete()
	{
		global $DB;

        $node_id_filter = "";

		// remove all old entries
		if(!empty($this->node_id))
		{
            if(is_numeric($this->node_id))
                $node_id_filter .= ' AND node_id = '.intval($this->node_id);

            if(is_numeric($this->node_uid))
                $node_id_filter .= ' AND node_uid = '.intval($this->node_uid);
			
			$DB->execute('
 				DELETE FROM nv_webdictionary
				WHERE subtype = '.protect($this->subtype).'
				  AND node_type = '.protect($this->node_type).'
				  AND theme = '.protect($this->theme).'
				  AND extension = '.protect($this->extension).'
				  AND website = '.protect($this->website).
				  $node_id_filter
			);
		}
		
		return $DB->get_affected_rows();		
	}

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.