    public function __construct () {
        Session::start();
        self::config('config');
        new Db();

        new Hooks();
        Hooks::run('init');
        new Options();
        self::lang(Options::v('system_lang'));
        new Language();
        new Site();
        new Router();
        Vendor::autoload();
        Token::create();
        Mod::loader();
        Theme::loader();
        Hooks::attach('admin_page_notif_action', array('System', 'alert'));

    }

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.