    public function display_sdm_stats_meta_box($post) {  //Stats metabox
	$old_count = get_post_meta($post->ID, 'sdm_count_offset', true);
	$value = isset($old_count) && $old_count != '' ? $old_count : '0';

	// Get checkbox for "disable download logging"
	$no_logs = get_post_meta($post->ID, 'sdm_item_no_log', true);
	$checked = isset($no_logs) && $no_logs === 'on' ? 'checked="checked"' : '';

	_e('These are the statistics for this download item.', 'simple-download-monitor');
	echo '<br /><br />';

	global $wpdb;
	$wpdb->get_results($wpdb->prepare('SELECT * FROM ' . $wpdb->prefix . 'sdm_downloads WHERE post_id=%s', $post->ID));

	echo '<div class="sdm-download-edit-dl-count">';
	_e('Number of Downloads:', 'simple-download-monitor');
	echo ' <strong>' . $wpdb->num_rows . '</strong>';
	echo '</div>';

	echo '<div class="sdm-download-edit-offset-count">';
	_e('Offset Count: ', 'simple-download-monitor');
	echo '<br />';
	echo ' <input type="text" size="10" name="sdm_count_offset" value="' . $value . '" />';
	echo '<p class="description">' . __('Enter any positive or negative numerical value; to offset the download count shown to the visitors (when using the download counter shortcode).', 'simple-download-monitor') . '</p>';
	echo '</div>';

	echo '<br />';
	echo '<div class="sdm-download-edit-disable-logging">';
	echo '<input type="checkbox" name="sdm_item_no_log" ' . $checked . ' />';
	echo '<span style="margin-left: 5px;"></span>';
	_e('Disable download logging for this item.', 'simple-download-monitor');
	echo '</div>';

	wp_nonce_field('sdm_count_offset_nonce', 'sdm_count_offset_nonce_check');
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.