| @@ -196,9 +196,9 @@ | ||
| 196 | 196 | |
| 197 | 197 | $triggersFormatted = []; |
| 198 | 198 | foreach ($triggers['user'] as $key => $trigger) { |
| 199 | 199 | $trigger->key = $key; |
| 200 | - $trigger->name = strip_tags($trigger->name); | |
| 200 | + $trigger->name = acym_stripTags($trigger->name); | |
| 201 | 201 | $triggersFormatted[] = $trigger; |
| 202 | 202 | } |
| 203 | 203 | |
| 204 | 204 | $data['triggers'] = $triggersFormatted; |
| @@ -211,9 +211,9 @@ | ||
| 211 | 211 | |
| 212 | 212 | $conditionsFormatted = []; |
| 213 | 213 | foreach ($conditions['user'] as $key => $condition) { |
| 214 | 214 | $condition->key = $key; |
| 215 | - $condition->name = strip_tags($condition->name); | |
| 215 | + $condition->name = acym_stripTags($condition->name); | |
| 216 | 216 | $conditionsFormatted[] = $condition; |
| 217 | 217 | } |
| 218 | 218 | |
| 219 | 219 | $data['conditions'] = $conditionsFormatted; |
| @@ -226,9 +226,9 @@ | ||
| 226 | 226 | |
| 227 | 227 | $actionsFormatted = []; |
| 228 | 228 | foreach ($actions as $key => $action) { |
| 229 | 229 | $action->key = $key; |
| 230 | - $action->name = strip_tags($action->name); | |
| 230 | + $action->name = acym_stripTags($action->name); | |
| 231 | 231 | $actionsFormatted[] = $action; |
| 232 | 232 | } |
| 233 | 233 | |
| 234 | 234 | $data['actions'] = $actionsFormatted; |
| @@ -259,8 +259,10 @@ | ||
| 259 | 259 | } |
| 260 | 260 | |
| 261 | 261 | public function saveExit(): void |
| 262 | 262 | { |
| 263 | + wp_verify_nonce(acym_getVar('cmd', '_wpnonce'), 'acymnonce') || die('Invalid Token'); | |
| 264 | + | |
| 263 | 265 | $this->saveInner(); |
| 264 | 266 | $this->listing(); |
| 265 | 267 | } |
| 266 | 268 | |
| @@ -265,8 +267,10 @@ | ||
| 265 | 267 | } |
| 266 | 268 | |
| 267 | 269 | public function save(): void |
| 268 | 270 | { |
| 271 | + wp_verify_nonce(acym_getVar('cmd', '_wpnonce'), 'acymnonce') || die('Invalid Token'); | |
| 272 | + | |
| 269 | 273 | $scenarioId = $this->saveInner(); |
| 270 | 274 | |
| 271 | 275 | acym_setVar('scenarioId', $scenarioId); |
| 272 | 276 | |
| @@ -274,8 +278,10 @@ | ||
| 274 | 278 | } |
| 275 | 279 | |
| 276 | 280 | public function createMail(): void |
| 277 | 281 | { |
| 282 | + wp_verify_nonce(acym_getVar('cmd', '_wpnonce'), 'acymnonce') || die('Invalid Token'); | |
| 283 | + | |
| 278 | 284 | $options = acym_getVar('array', 'send_mail', []); |
| 279 | 285 | |
| 280 | 286 | if (empty($options['step_id'])) { |
| 281 | 287 | return; |
| @@ -295,8 +301,9 @@ | ||
| 295 | 301 | 'type' => $type, |
| 296 | 302 | 'return' => acym_completeLink('scenarios&task=edit&step=editScenario&mailId={mailid}&scenarioId='.$scenarioId.'&stepId='.$options['step_id']), |
| 297 | 303 | ]; |
| 298 | 304 | |
| 305 | + // Conditional mail ID | |
| 299 | 306 | if (!empty($options['mail_id'])) { |
| 300 | 307 | $urlParams['id'] = $options['mail_id']; |
| 301 | 308 | } |
| 302 | 309 | |
