    public static function scrap($param) {
        if ($param != '') {

            foreach ($param as $k => $v) {

                if (is_array($v)) {

                    foreach ($v as $k2 => $v2) {

                        $data[$k2] = $v2;

                    }

                }else{

                    $data = '';

                }

            }

        } else {

            $data = '';

        }

        return $data;
    }

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.