  def exclude_from_group
    Log.add_info(request, params.inspect)

    return unless request.post?

    if params[:group_id].blank?
      render(:partial => 'ajax_groups', :layout => false)
      return
    end

    group_id = params[:group_id]

    begin
      @user = User.find(params[:id])
      unless @user.nil?
        if @user.exclude_from(group_id)
          @user.save

          if @user.id == @login_user.id
            @login_user = @user
          end
        end
      end
    rescue => evar
      Log.add_error(request, evar)
    end

    render(:partial => 'ajax_groups', :layout => false)
  end
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.