  def create_title

    return unless request.post?

    titles = User.get_config_titles
    titles = [] if titles.nil?
    titles << t('user.new_title')
    User.save_config_titles(titles)

    render(:partial => 'ajax_title', :layout => false)
  end
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.