| @@ -1,36 +1,37 @@ | ||
| 1 | 1 | <?php |
| 2 | +defined('ABSPATH') || die('Restricted Access'); | |
| 2 | 3 | |
| 3 | 4 | use AcyMailing\Classes\MailClass; |
| 4 | 5 | |
| 5 | 6 | ?> |
| 6 | 7 | |
| 7 | -<form id="acym_form" action="<?php echo acym_completeLink('dashboard'); ?>" method="post" name="acyForm" data-abide novalidate> | |
| 8 | +<form id="acym_form" action="<?php echo esc_url(acym_completeLink('dashboard')); ?>" method="post" name="acyForm" data-abide novalidate> | |
| 8 | 9 | <div id="acym__walkthrough"> |
| 9 | 10 | <div class="acym__walkthrough cell grid-x" id="acym__walkthrough__editor"> |
| 10 | 11 | <div class="acym__content cell text-center grid-x acym__walkthrough__content align-center"> |
| 11 | - <h1 class="cell acym__title text-center"><?php echo acym_translation('ACYM_YOUR_FIRST_EMAIL'); ?></h1> | |
| 12 | + <h1 class="cell acym__title text-center"><?php echo esc_html(acym_translation('ACYM_YOUR_FIRST_EMAIL')); ?></h1> | |
| 12 | 13 | |
| 13 | 14 | <div class="cell grid-x align-center margin-top-1"> |
| 14 | 15 | <div class="cell xxlarge-6 large-8 grid-x"> |
| 15 | - <div class="cell"><?php echo acym_translation('ACYM_PREVIEW_OF_THE_EMAIL'); ?></div> | |
| 16 | + <div class="cell"><?php echo esc_html(acym_translation('ACYM_PREVIEW_OF_THE_EMAIL')); ?></div> | |
| 16 | 17 | </div> |
| 17 | 18 | </div> |
| 18 | 19 | |
| 19 | 20 | <div id="acym__walkthrough__editor__container" class="cell grid-x xxlarge-7 large-8"> |
| 20 | - <input type="hidden" name="mail[id]" value="<?php echo acym_escape($data['mail']->id); ?>" /> | |
| 21 | - <input type="hidden" name="id" value="<?php echo acym_escape($data['mail']->id); ?>" /> | |
| 21 | + <input type="hidden" name="mail[id]" value="<?php echo esc_attr($data['mail']->id); ?>" /> | |
| 22 | + <input type="hidden" name="id" value="<?php echo esc_attr($data['mail']->id); ?>" /> | |
| 22 | 23 | <input type="hidden" |
| 23 | - id="acym__mail__edit__editor__social__icons" | |
| 24 | - value="<?php echo acym_escape($data['social_icons']); ?>"> | |
| 25 | - <input type="hidden" id="acym__mail__type" name="mail[type]" value="<?php echo acym_escape(MailClass::TYPE_STANDARD); ?>"> | |
| 24 | + id="acym__mail__edit__editor__social__icons" | |
| 25 | + value="<?php echo esc_attr($data['social_icons']); ?>"> | |
| 26 | + <input type="hidden" id="acym__mail__type" name="mail[type]" value="<?php echo esc_attr(MailClass::TYPE_STANDARD); ?>"> | |
| 26 | 27 | <input type="hidden" name="task"> |
| 27 | - <?php echo $data['editor']->display(); ?> | |
| 28 | + <?php $data['editor']->display(); ?> | |
| 28 | 29 | </div> |
| 29 | 30 | |
| 30 | 31 | <div class="cell grid-x grid-margin-x align-center margin-top-2"> |
| 31 | 32 | <button type="button" data-task="startUsing" class="cell shrink button button-secondary acy_button_submit"> |
| 32 | - <?php echo acym_translation('ACYM_START_USING'); ?> | |
| 33 | + <?php echo esc_html(acym_translation('ACYM_START_USING')); ?> | |
| 33 | 34 | </button> |
| 34 | 35 | </div> |
| 35 | 36 | </div> |
| 36 | 37 | </div> |
