1067
&& (Bugzilla->params->{'usermatchmode'} eq 'search')
1067
&& (Bugzilla->params->{'usermatchmode'} eq 'search')
1068
&& (length($str) >= 3))
1068
&& (length($str) >= 3))
1071
trick_taint($str);
1070
trick_taint($str);
1073
my $query = "SELECT DISTINCT login_name FROM profiles ";
1072
my $query = "SELECT DISTINCT login_name FROM profiles ";
1076
ON user_group_map.user_id = profiles.userid ";
1075
ON user_group_map.user_id = profiles.userid ";
1078
$query .= " WHERE (" .
1077
$query .= " WHERE (" .
1079
$dbh->sql_position('?', 'LOWER(login_name)') . " > 0" . " OR " .
1078
$dbh->sql_iposition('?', 'login_name') . " > 0" . " OR " .
1080
$dbh->sql_position('?', 'LOWER(realname)') . " > 0) ";
1079
$dbh->sql_iposition('?', 'realname') . " > 0) ";
1081
if (Bugzilla->params->{'usevisibilitygroups'}) {
1080
if (Bugzilla->params->{'usevisibilitygroups'}) {
1082
$query .= " AND isbless = 0" .
1081
$query .= " AND isbless = 0" .
1083
" AND group_id IN(" .
1082
" AND group_id IN(" .