    public static function stripFolder($req_uri) {
        $uri = Site::$url;
        $folder = self::getFolder();

        $uri2 = str_replace($folder, "", $req_uri);
        // print_r($uri2);
        return $uri2;
    }

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.