Elgg / Elgg

mod/friends/actions/friends/add.php

<?php
/**
 * Elgg add friend action
 */

// Get the GUID of the user to friend
$friend_guid = get_input('friend');
$friend = get_user($friend_guid);

It seems like $friend_guid can also be of type string; however, parameter $guid of get_user() does only seem to accept integer, maybe add an additional type check?

if (!$friend instanceof \ElggUser) {
	return elgg_error_response(elgg_echo('error:missing_data'));
}

if (!elgg_get_logged_in_user_entity()->addFriend($friend->guid, true)) {
	return elgg_error_response(elgg_echo('friends:add:failure', [$friend->getDisplayName()]));
}

return elgg_ok_response('', elgg_echo('friends:add:successful', [$friend->getDisplayName()]));