Elgg / Elgg

views/json/resources/livesearch/groups.php

<?php

elgg_gatekeeper();

$limit = get_input('limit', elgg_get_config('default_limit'));
$query = get_input('term', get_input('q'));

$options = [
	'query' => $query,
	'type' => 'group',
	'limit' => $limit,
	'sort' => 'name',
	'order' => 'ASC',
	'fields' => ['metadata' => ['name', 'username']],
	'item_view' => 'search/entity',
];

$target_guid = get_input('match_target');
if ($target_guid) {
	$target = get_entity($target_guid);

It seems like $target_guid can also be of type string; however, parameter $guid of get_entity() does only seem to accept integer, maybe add an additional type check?

} else {
	$target = elgg_get_logged_in_user_entity();
}

if (!$target || !$target->canEdit()) {
	forward('', '403');
}

if (get_input('match_owner', false)) {
	$options['owner_guid'] = (int) $target->guid;
}

if (get_input('match_membership', false)) {
	$dbprefix = elgg_get_config('dbprefix');
	$options['wheres'][] = "
		EXISTS(
			SELECT 1 FROM {$dbprefix}entity_relationships
			WHERE guid_one = $target->guid
			AND relationship = 'member'
			AND guid_two = e.guid
		)
	";
}

elgg_set_http_header("Content-Type: application/json;charset=utf-8");

echo elgg_list_entities($options, 'elgg_search');