| @@ -1,5 +1,7 @@ | ||
| 1 | 1 | <?php |
| 2 | +// phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound -- View file, its variables are local to the include scope, not true globals. | |
| 3 | +defined('ABSPATH') || die('Restricted Access'); | |
| 2 | 4 | |
| 3 | 5 | use AcyMailing\Classes\UserClass; |
| 4 | 6 | use AcyMailing\Helpers\CaptchaHelper; |
| 5 | 7 | |
| @@ -7,9 +9,9 @@ | ||
| 7 | 9 | $userClass = new UserClass(); |
| 8 | 10 | $identifiedUser = $userClass->getOneByEmail($currentUserEmail); |
| 9 | 11 | |
| 10 | 12 | if (empty($identifiedUser) && $config->get('captcha', 'none') !== 'none' && acym_level(ACYM_ESSENTIAL)) { |
| 11 | - echo '<div class="onefield fieldacycaptcha" id="field_captcha_'.$form->form_tag_name.'">'; | |
| 13 | + echo '<div class="onefield fieldacycaptcha" id="field_captcha_'.esc_attr($form->form_tag_name).'">'; | |
| 12 | 14 | $captcha = new CaptchaHelper(); |
| 13 | - echo $captcha->display($form->form_tag_name); | |
| 15 | + $captcha->display($form->form_tag_name); | |
| 14 | 16 | echo '</div>'; |
| 15 | 17 | } |
