				return dfrd.resolve({error : fm.res('error', 'cmdsupport')});
				break;
				
			case 'file':
				opts.data.cmd = 'open';
				opts.data.current = fm.file(opts.data.target).phash;
				break;
		}
		// cmd = opts.data.cmd
		
		xhr = $.ajax(opts)
			.fail(function(error) {
				dfrd.reject(error)
			})
			.done(function(raw) {
				data = self.normalize(cmd, raw);
				
				if (cmd == 'paste') {
					if (! data.error && ! data.added.length && ! data.removed.length && ! data.changed.length) {
						data.error = [opts.data.cut? 'errMove' : 'errCopy', fm.i18n('items'), 'errExists', fm.file(opts.data.targets[0]).name];
					}
					if (! data.error) {
						fm.sync();
					}
				}
				dfrd.resolve(data);
			})
			
		return dfrd;
	}
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.