    public static function cleanX ($c) {
        $val = self::strip_tags_content($c, '<script>', TRUE);
        $val = htmlspecialchars(
                $val,
                ENT_QUOTES|ENT_HTML5,
                "utf-8"
            );
        // $val = htmlentities(
        //             $c,
        //             ENT_QUOTES | ENT_IGNORE, "UTF-8");
        return $val;
    }
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.