    public function run(){
        if (Yii::app()->user->isGuest) {
            Yii::app()->controller->redirect(Yii::app()->controller->createUrl('/site/login'));
        }

        if (Yii::app()->request->getRequestType () === 'GET') {
            $_POST = $_GET;
        }

        if (isset ($_POST['passConfirm']) && $_POST['passConfirm']) {
            MassAction::superMassActionPasswordConfirmation ();
            return;
        }
        if (!isset ($_POST['massAction']) || 
            ((!isset ($_POST['superCheckAll']) || !$_POST['superCheckAll']) &&
             (!isset ($_POST['gvSelection']) || !is_array ($_POST['gvSelection'])))) {

            /**/AuxLib::debugLogR ('run error');
            throw new CHttpException (400, Yii::t('app', 'Bad Request'));
        }
        $massAction = $_POST['massAction'];
        $massActionInstance = $this->getInstanceFor ($massAction);

        if (isset ($_POST['superCheckAll']) && $_POST['superCheckAll']) {
            $uid = $_POST['uid'];
            $idChecksum = $_POST['idChecksum'];
            $totalItemCount = intval ($_POST['totalItemCount']);
            $massActionInstance->superExecute ($uid, $totalItemCount, $idChecksum);
        } else {
            $gvSelection = $_POST['gvSelection'];
            $massActionInstance->beforeExecute ();
            $massActionInstance->execute ($gvSelection);
            $massActionInstance::echoFlashes ();
        }
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.