| @@ -1,31 +1,48 @@ | ||
| 1 | -<form id="acym_form" action="<?php echo acym_completeLink(acym_getVar('cmd', 'ctrl')); ?>" method="post" name="acyForm" class="acym__form__campaign__edit"> | |
| 1 | +<?php | |
| 2 | +// phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound -- View file, its variables are local to the include scope, not true globals. | |
| 3 | +defined('ABSPATH') || die('Restricted Access'); | |
| 4 | +?> | |
| 5 | +<form id="acym_form" action="<?php echo esc_url(acym_completeLink(acym_getVar('cmd', 'ctrl'))); ?>" method="post" name="acyForm" class="acym__form__campaign__edit"> | |
| 2 | 6 | <div class="cell grid-x align-center" id="acym__campaign__summary__generated"> |
| 3 | 7 | <div class="cell medium-7 grid-x acym__content"> |
| 4 | - <h1 class="cell text-center acym__campaign__summary__generated__title "><?php echo $data['mail']->name; ?></h1> | |
| 8 | + <h1 class="cell text-center acym__campaign__summary__generated__title "><?php echo esc_html($data['mail']->name); ?></h1> | |
| 5 | 9 | <div class="cell text-center acym__campaign__summary__generated__sub__title margin-bottom-2 margin-top-1"> |
| 6 | 10 | <?php |
| 7 | 11 | if (!empty($data['parent_campaign']->id)) { |
| 8 | - echo acym_translationSprintf( | |
| 9 | - 'ACYM_CAMPAIGN_GENERATED_BY', | |
| 10 | - '<a href="'.acym_completeLink('campaigns&task=edit&step=editEmail&campaignId='.$data['parent_campaign']->id).'">'.$data['parent_mail']->name.'</a>' | |
| 12 | + echo wp_kses( | |
| 13 | + acym_translationSprintf( | |
| 14 | + 'ACYM_CAMPAIGN_GENERATED_BY', | |
| 15 | + '<a href="'.esc_url(acym_completeLink('campaigns&task=edit&step=editEmail&campaignId='.$data['parent_campaign']->id)).'">'.esc_html( | |
| 16 | + $data['parent_mail']->name | |
| 17 | + ).'</a>' | |
| 18 | + ), | |
| 19 | + [ | |
| 20 | + 'a' => [ | |
| 21 | + 'href' => true, | |
| 22 | + ], | |
| 23 | + ] | |
| 11 | 24 | ); |
| 12 | 25 | } else { |
| 13 | - echo acym_translation('ACYM_AUTO_CAMPAIGN_DELETED'); | |
| 26 | + echo esc_html(acym_translation('ACYM_AUTO_CAMPAIGN_DELETED')); | |
| 14 | 27 | } |
| 15 | 28 | ?> |
| 16 | 29 | </div> |
| 17 | 30 | <?php if (!$data['campaign']->sent && !$data['campaign']->waiting_confirmation) { ?> |
| 18 | 31 | <div class="cell grid-x acym__campaign__summary__generated__disabled acym_vcenter margin-bottom-2"> |
| 19 | - <div class="cell text-center acym__campaign__summary__generated__disabled__text"><?php echo acym_translation('ACYM_CAMPAIGN_HAS_BEEN_DISABLED'); ?></div> | |
| 32 | + <div class="cell text-center acym__campaign__summary__generated__disabled__text"> | |
| 33 | + <?php echo esc_html(acym_translation('ACYM_CAMPAIGN_HAS_BEEN_DISABLED')); ?> | |
| 34 | + </div> | |
| 20 | 35 | </div> |
| 21 | 36 | <?php } ?> |
| 22 | 37 | <div class="cell grid-x acym__campaign__summary__generated__list acym_vcenter margin-bottom-2"> |
| 23 | - <div class="cell shrink acym__campaign__summary__generated__list__title margin-right-1"><?php echo acym_translation('ACYM_LISTS_SUMMARY'); ?></div> | |
| 38 | + <div class="cell shrink acym__campaign__summary__generated__list__title margin-right-1"><?php echo esc_html(acym_translation('ACYM_LISTS_SUMMARY')); ?></div> | |
| 24 | 39 | <div class="cell auto grid-x grid-margin-x grid-margin-y"> |
| 25 | 40 | <?php foreach ($data['lists'] as $list) { ?> |
| 26 | - <div class="cell shrink acym__campaign__summary__generated__list__tag"><i class="acymicon-circle" | |
| 27 | - style="color: <?php echo $list->color; ?>;"></i><?php echo $list->name; ?></div> | |
| 41 | + <div class="cell shrink acym__campaign__summary__generated__list__tag"> | |
| 42 | + <i class="acymicon-circle" | |
| 43 | + style="color: <?php echo esc_attr($list->color ?? '#0079d3'); ?>;"></i><?php echo esc_html($list->name); ?> | |
| 44 | + </div> | |
| 28 | 45 | <?php } ?> |
| 29 | 46 | </div> |
| 30 | 47 | </div> |
| 31 | 48 | <?php |
| @@ -36,29 +53,37 @@ | ||
| 36 | 53 | <div class="cell grid-x acym__campaign__summary__generated__mail"> |
| 37 | 54 | <div class="cell grid-x acym__campaign__summary__generated__mail__one"> |
| 38 | 55 | <div class="cell grid-x acym_vcenter"> |
| 39 | 56 | <div class="cell shrink acym__campaign__summary__generated__mail__one__subject"> |
| 40 | - <span class="acym__campaign__summary__generated__mail__one__bold"><?php echo acym_translation('ACYM_EMAIL_SUBJECT'); ?></span> | |
| 41 | - <span class="acym__campaign__summary__email__information-subject"><?php echo $data['mail']->subject; ?></span> | |
| 57 | + <span class="acym__campaign__summary__generated__mail__one__bold"><?php echo esc_html(acym_translation('ACYM_EMAIL_SUBJECT')); ?></span> | |
| 58 | + <span class="acym__campaign__summary__email__information-subject"><?php echo esc_html($data['mail']->subject); ?></span> | |
| 42 | 59 | </div> |
| 43 | 60 | <div class="cell auto acym__campaign__summary__generated__mail__one__preview margin-left-1"> |
| 44 | - <?php echo empty($data['mail']->preheader) ? '' : $data['mail']->preheader; ?> | |
| 61 | + <?php echo empty($data['mail']->preheader) ? '' : esc_html($data['mail']->preheader); ?> | |
| 45 | 62 | </div> |
| 46 | 63 | </div> |
| 47 | 64 | <div class="cell grid-x acym__campaign__summary__generated__mail__one__info margin-top-2"> |
| 48 | 65 | <div class="cell auto text-left"> |
| 49 | - <span class="acym__campaign__summary__generated__mail__one__bold"><?php echo acym_translation('ACYM_FROM_SUMMARY'); ?></span> | |
| 50 | - <?php echo $data['mail']->from_name.', <a href="mailto:'.$data['mail']->from_email.'">'.$data['mail']->from_email.'</a>'; ?> | |
| 66 | + <span class="acym__campaign__summary__generated__mail__one__bold"><?php echo esc_html(acym_translation('ACYM_FROM_SUMMARY')); ?></span> | |
| 67 | + <?php | |
| 68 | + echo esc_html($data['mail']->from_name).', <a href="mailto:'.esc_attr($data['mail']->from_email).'">'; | |
| 69 | + echo esc_html($data['mail']->from_email); | |
| 70 | + echo '</a>'; | |
| 71 | + ?> | |
| 51 | 72 | </div> |
| 52 | 73 | <div class="cell auto text-right"> |
| 53 | - <span class="acym__campaign__summary__generated__mail__one__bold"><?php echo acym_translation('ACYM_REPLYTO_SUMMARY'); ?></span> | |
| 54 | - <?php echo $data['mail']->reply_to_name.', <a href="mailto:'.$data['mail']->reply_to_email.'">'.$data['mail']->reply_to_email.'</a>'; ?> | |
| 74 | + <span class="acym__campaign__summary__generated__mail__one__bold"><?php echo esc_html(acym_translation('ACYM_REPLYTO_SUMMARY')); ?></span> | |
| 75 | + <?php | |
| 76 | + echo esc_html($data['mail']->reply_to_name).', <a href="mailto:'.esc_attr($data['mail']->reply_to_email).'">'; | |
| 77 | + echo esc_html($data['mail']->reply_to_email); | |
| 78 | + echo '</a>'; | |
| 79 | + ?> | |
| 55 | 80 | </div> |
| 56 | 81 | </div> |
| 57 | 82 | </div> |
| 58 | 83 | <div class="cell grid-x acym__campaign__summary__generated__mail__one"> |
| 59 | - <input type="hidden" class="acym__hidden__mail__content" value="<?php echo acym_escape(acym_absoluteURL($data['mail']->body)); ?>"> | |
| 60 | - <div style="display: none" class="acym__hidden__mail__stylesheet"><?php echo $data['mail']->stylesheet; ?></div> | |
| 84 | + <input type="hidden" class="acym__hidden__mail__content" value="<?php echo esc_attr(acym_absoluteURL($data['mail']->body)); ?>"> | |
| 85 | + <input type="hidden" class="acym__hidden__mail__stylesheet" value="<?php echo esc_attr($data['mail']->stylesheet); ?>"> | |
| 61 | 86 | <div class="cell grid-x acym__campaign__summary__generated__mail__preview"> |
| 62 | 87 | <i class="acymicon-sort acym__campaign__summary__generated__mail__toogle__preview"></i> |
| 63 | 88 | <div id="acym__wysid__email__preview" class="acym__email__preview grid-x cell margin-top-1"></div> |
| 64 | 89 | </div> |
| @@ -65,28 +90,30 @@ | ||
| 65 | 90 | </div> |
| 66 | 91 | </div> |
| 67 | 92 | <div class="cell text-right grid-margin-y acym__campaign__summary__generated__action grid-margin-x margin-top-2 grid-x"> |
| 68 | 93 | <div class="cell medium-shrink text-left"> |
| 69 | - <?php echo acym_backToListing(); ?> | |
| 94 | + <?php acym_backToListing(); ?> | |
| 70 | 95 | </div> |
| 71 | 96 | <div class="cell medium-auto align-right grid-margin-x acym_vcenter"> |
| 72 | 97 | <div class="cell medium-auto"></div> |
| 73 | 98 | <?php if ($data['campaign']->sent) { ?> |
| 74 | 99 | <p class="cell text-center acym__campaign__summary__generated__action__text"> |
| 75 | - <?php echo acym_translationSprintf('ACYM_CAMPAIGN_HAS_BEEN_SENT_ON_X', $data['campaign']->sending_date); ?> | |
| 100 | + <?php echo esc_html(acym_translationSprintf('ACYM_CAMPAIGN_HAS_BEEN_SENT_ON_X', $data['campaign']->sending_date)); ?> | |
| 76 | 101 | </p> |
| 77 | 102 | <?php } elseif ($data['campaign']->waiting_confirmation) { ?> |
| 78 | 103 | <button type="button" class="cell shrink button acym__button__cancel acy_button_submit" data-task="disableGeneratedCampaign"> |
| 79 | - <?php echo acym_translation('ACYM_DISABLE'); ?> <i class="acymicon-lock"></i> | |
| 104 | + <?php echo esc_html(acym_translation('ACYM_DISABLE')); ?> <i class="acymicon-lock"></i> | |
| 80 | 105 | </button> |
| 81 | - <button type="button" class="cell shrink button button-send acy_button_submit" data-task="addQueue"><?php echo acym_translation('ACYM_SEND'); ?> | |
| 82 | - <i class="acymicon-paper-plane"></i></button> | |
| 106 | + <button type="button" class="cell shrink button button-send acy_button_submit" data-task="addQueue"> | |
| 107 | + <?php echo esc_html(acym_translation('ACYM_SEND')); ?> | |
| 108 | + <i class="acymicon-paper-plane"></i> | |
| 109 | + </button> | |
| 83 | 110 | <?php } else { ?> |
| 84 | 111 | <button type="button" class="cell shrink button acy_button_submit" data-task="enableGeneratedCampaign"> |
| 85 | - <?php echo acym_translation('ACYM_ENABLE'); ?> <i class="acymicon-unlock"></i> | |
| 112 | + <?php echo esc_html(acym_translation('ACYM_ENABLE')); ?> <i class="acymicon-unlock"></i> | |
| 86 | 113 | </button> |
| 87 | 114 | <button type="button" class="cell shrink disabled button button-send margin-bottom-0" disabled> |
| 88 | - <?php echo acym_translation('ACYM_SEND'); ?><i class="acymicon-paper-plane"></i> | |
| 115 | + <?php echo esc_html(acym_translation('ACYM_SEND')); ?><i class="acymicon-paper-plane"></i> | |
| 89 | 116 | </button> |
| 90 | 117 | <?php } ?> |
| 91 | 118 | </div> |
| 92 | 119 | </div> |