		drag       : function(e, ui) {
			var helper = ui.helper,
				wzpos  = helper.data('wzpos'),
				autoUp;
			
			if ((autoUp = wzpos.wzTop > e.pageY) || wzpos.wzBottom < e.pageY) {
				if (wzpos.cwdEdge > e.pageX) {
					helper.data('autoScr', (wzpos.ltr? 'navbar' : 'cwd') + (autoUp? 'Up' : 'Down'));
				} else {
					helper.data('autoScr', (wzpos.ltr? 'cwd' : 'navbar') + (autoUp? 'Up' : 'Down'));
				}
				helper.data('autoScrVal', Math.pow((autoUp? wzpos.wzTop - e.pageY : e.pageY - wzpos.wzBottom), 1.3));
			} else {
				if (helper.data('autoScr')) {
					helper.data('refreshPositions', 1).data('autoScr', null);
				}
			}
			if (helper.data('refreshPositions') && $(this).elfUiWidgetInstance('draggable')) {
				if (helper.data('refreshPositions') > 0) {
					$(this).draggable('option', { refreshPositions : true, elfRefresh : true });
					helper.data('refreshPositions', -1);
				} else {
					$(this).draggable('option', { refreshPositions : false, elfRefresh : false });
					helper.data('refreshPositions', null);
				}
			}
		},
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.