    public static function setActive($lang = '')
    {
        $lg = Options::v('multilang_country');
        $lg = json_decode($lg, true);

        if (isset($_GET['lang']) && $_GET['lang'] != '' && $lang == '') {
            if (key_exists($_GET['lang'], $lg)) {
                Session::set(array('lang' => $_GET['lang']));
            } else {
                Session::remove('lang');
            }
        } elseif ($lang != '') {
            if (key_exists($lang, $lg)) {
                Session::set(array('lang' => $lang));
            } else {
                Session::remove('lang');
            }
        }
    }
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.