    public static function local($date, $format = '')
    {
        setlocale(LC_TIME, Options::v('country_id'));
        (empty($format)) ? $format = '%#d %B %Y %H:%M %p' : $format = $format;
        $date = new DateTime($date);
        $date->setTimezone(new DateTimeZone(self::$timezone));
        $newdate = $date->format('Y/m/j H:i:s');
        $newdate = strftime($format, strtotime($newdate));

        return $newdate.' '.$date->format('T');
    }
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.