| @@ -1,5 +1,14 @@ | ||
| 1 | -<form id="acym_form" action="<?php echo acym_completeLink(acym_getVar('cmd', 'ctrl')); ?>" method="post" name="acyForm" data-abide novalidate enctype="multipart/form-data"> | |
| 1 | +<?php | |
| 2 | +defined('ABSPATH') || die('Restricted Access'); | |
| 3 | +?> | |
| 4 | +<form id="acym_form" | |
| 5 | + action="<?php echo esc_url(acym_completeLink(acym_getVar('cmd', 'ctrl'))); ?>" | |
| 6 | + method="post" | |
| 7 | + name="acyForm" | |
| 8 | + data-abide | |
| 9 | + novalidate | |
| 10 | + enctype="multipart/form-data"> | |
| 2 | 11 | <div class="grid-x"> |
| 3 | 12 | <div id="acym__user__edit" class="cell grid-x acym__content "> |
| 4 | 13 | <?php include acym_getView('users', 'edit_actions'); ?> |
| 5 | 14 | |
| @@ -14,10 +23,10 @@ | ||
| 14 | 23 | </div> |
| 15 | 24 | <?php include acym_getView('users', 'edit_subscription'); ?> |
| 16 | 25 | </div> |
| 17 | 26 | |
| 18 | - <input type="hidden" name="lists_already_add" id="acym__user__lists_already_add" value="<?php echo acym_escape(json_encode($data['subscriptionsIds'])); ?>"> | |
| 19 | - <input type="hidden" name="userId" value="<?php echo empty($data['user-information']->id) ? '' : acym_escape($data['user-information']->id); ?>"> | |
| 27 | + <input type="hidden" name="lists_already_add" id="acym__user__lists_already_add" value="<?php echo esc_attr(json_encode($data['subscriptionsIds'])); ?>"> | |
| 28 | + <input type="hidden" name="userId" value="<?php echo empty($data['user-information']->id) ? '' : esc_attr($data['user-information']->id); ?>"> | |
| 20 | 29 | <input type="hidden" name="acy_source" value="Back-end" /> |
| 21 | 30 | <?php acym_formOptions(); ?> |
| 22 | 31 | </div> |
| 23 | 32 | </form> |
