  def self.get_for_group(group_id)

    SqlHelper.validate_token([group_id])
    if group_id.nil?
      con = 'group_id is null'
    else
      con = "group_id=#{group_id.to_i}"
    end

    Location.do_expire(con)

    return Location.where(con).to_a
  end
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.