function checksearch(e) {
	if(window.event)
		var keyCode=window.event.keyCode;
	else
		var keyCode=e.which;
	if(keyCode==13) {
		var searchfor=$('#newsearch input[name=searchfor]').val();
			if(searchfor=="") {
				newsearch.searchfor.focus();
			} else {
				$('#newsearch').trigger('submit', true);
			}
	}
}
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.