    public static function thmList()
    {
        //$mod = '';
        $handle = dir(GX_THEME);
        while (false !== ($entry = $handle->read())) {
            if ($entry != '.' && $entry != '..') {
                $dir = GX_THEME.$entry;
                if (is_dir($dir) == true) {
                    $thm[] = basename($dir);
                }
            }
        }

        $handle->close();

        return $thm;
    }
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.