function _makeExtra($value, $title = '') {
    global $THIS_RET;

    if ($THIS_RET['WITH_TEACHER_ID'])
        $return .= ''._with.':&nbsp;' . GetTeacher($THIS_RET['WITH_TEACHER_ID']) . '<BR>';
    if ($THIS_RET['NOT_TEACHER_ID'])
        $return .= ''._notWith.':&nbsp;' . GetTeacher($THIS_RET['NOT_TEACHER_ID']) . '<BR>';
    if ($THIS_RET['WITH_PERIOD_ID'])
        $return .= ''._on.':&nbsp;' . GetPeriod($THIS_RET['WITH_PERIOD_ID']) . '<BR>';
    if ($THIS_RET['NOT_PERIOD_ID'])
        $return .= ''._notOn.':&nbsp;' . GetPeriod($THIS_RET['NOT_PERIOD_ID']) . '<BR>';
    if ($THIS_RET['PRIORITY'])
        $return .= ''._priority.':&nbsp;' . $THIS_RET['PRIORITY'] . '<BR>';
    if ($THIS_RET['MARKING_PERIOD_ID'])
        $return .= ''._markingPeriod.':&nbsp;' . GetMP($THIS_RET['MARKING_PERIOD_ID']) . '<BR>';

    return $return;
}
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.