		static function getForm($id) {
			$id = sqlescape($id);
			$form = sqlfetch(sqlquery("SELECT * FROM btx_form_builder_forms WHERE id = '$id'"));
			if (!$form) {
				return false;
			}

			$fields = array();
			$object_count = 0;
			$field_query = sqlquery("SELECT * FROM btx_form_builder_fields WHERE form = '$id' AND `column` = '0' ORDER BY position DESC, id ASC");
			
			while ($field = sqlfetch($field_query)) {
				$object_count++;

				if ($field["type"] == "column") {
					// Get left column
					$column_fields = array();
					$column_query = sqlquery("SELECT * FROM btx_form_builder_fields WHERE `column` = '".$field["id"]."' AND `alignment` = 'left' ORDER BY position DESC, id ASC");
					
					while ($sub_field = sqlfetch($column_query)) {
						$column_fields[] = $sub_field;
						$object_count++;
					}

					$field["fields"] = $column_fields;
					$fields[] = $field;

					// Get right column
					$column_fields = array();
					$column_query = sqlquery("SELECT * FROM btx_form_builder_fields WHERE `column` = '".$field["id"]."' AND `alignment` = 'right' ORDER BY position DESC, id ASC");
					
					while ($sub_field = sqlfetch($column_query)) {
						$column_fields[] = $sub_field;
						$object_count++;
					}
					
					$field["fields"] = $column_fields;
					$fields[] = $field;

					// Column start/end count as objects so we add 3 since there's two columns
					$object_count += 3;
				} else {
					$fields[] = $field;				
				}
			}

			$form["fields"] = $fields;
			$form["object_count"] = $object_count - 1; // We start at 0

			return $form;
		}
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.