    public static function format ($post, $id) {
        // split post for readmore...
        $post = Typo::Xclean($post);
        $more = explode('[[--readmore--]]', $post);
        //print_r($more);
        if (count($more) > 1) {
            $post = explode('[[--readmore--]]', $post);
            $post = $post[0]." <a href=\"".Url::post($id)."\">".READ_MORE."</a>";
        }else{
            $post = $post;
        }

        $post = Hooks::filter('post_content_filter', $post);
        return $post;
    }

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.