| @@ -1,21 +1,24 @@ | ||
| 1 | -<form id="acym_form" action="<?php echo acym_completeLink(acym_getVar('cmd', 'ctrl')); ?>" method="post" name="acyForm"> | |
| 1 | +<?php | |
| 2 | +defined('ABSPATH') || die('Restricted Access'); | |
| 3 | +?> | |
| 4 | +<form id="acym_form" action="<?php echo esc_url(acym_completeLink(acym_getVar('cmd', 'ctrl'))); ?>" method="post" name="acyForm"> | |
| 2 | 5 | <div id="acym_content" class="acym__content cell grid-x popup_size"> |
| 3 | 6 | <div class="cell margin-bottom-1"> |
| 4 | - <h1 class="acym__modal__language__share__title cell text-center margin-bottom-1"><?php echo acym_translation('ACYM_SHARE_TRANSLATION'); ?></h1> | |
| 7 | + <h1 class="acym__modal__language__share__title cell text-center margin-bottom-1"><?php echo esc_html(acym_translation('ACYM_SHARE_TRANSLATION')); ?></h1> | |
| 5 | 8 | <div class="acym__modal__language__share__information"> |
| 6 | - <h6 class="margin-bottom-1"><?php echo acym_translation('ACYM_SHARE_CONFIRMATION_1'); ?></h6> | |
| 7 | - <h6><?php echo acym_translation('ACYM_SHARE_CONFIRMATION_2'); ?></h6> | |
| 8 | - <h6><?php echo acym_translation('ACYM_SHARE_CONFIRMATION_3'); ?></h6> | |
| 9 | + <h6 class="margin-bottom-1"><?php echo wp_kses(acym_translation('ACYM_SHARE_CONFIRMATION_1'), ['b' => []]); ?></h6> | |
| 10 | + <h6><?php echo esc_html(acym_translation('ACYM_SHARE_CONFIRMATION_2')); ?></h6> | |
| 11 | + <h6><?php echo esc_html(acym_translation('ACYM_SHARE_CONFIRMATION_3')); ?></h6> | |
| 9 | 12 | </div> |
| 10 | - <h3 class="acym__title acym__title__secondary margin-top-1"><?php echo acym_translation('ACYM_EMAIL_BODY'); ?></h3> | |
| 13 | + <h3 class="acym__title acym__title__secondary margin-top-1"><?php echo esc_html(acym_translation('ACYM_EMAIL_BODY')); ?></h3> | |
| 11 | 14 | <textarea rows="8" name="mailbody" class="acym__language__modal__body margin-top-1">Hi Acyba team, |
| 12 | 15 | Here is a new version of the language file, I translated few more strings...</textarea> |
| 13 | 16 | </div> |
| 14 | - <input type="hidden" name="code" value="<?php echo acym_escape($data['file']->name); ?>" /> | |
| 17 | + <input type="hidden" name="code" value="<?php echo esc_attr($data['file']->name); ?>" /> | |
| 15 | 18 | <div class="medium-10 hide-for-small-only cell"></div> |
| 16 | 19 | <button type="button" data-task="send" data-confirmation-message="ACYM_SURE_SEND_TRANSALTION" class="button cell medium-2 acy_button_submit"> |
| 17 | - <?php echo acym_translation('ACYM_SEND'); ?> | |
| 20 | + <?php echo esc_html(acym_translation('ACYM_SEND')); ?> | |
| 18 | 21 | </button> |
| 19 | 22 | <?php acym_formOptions(); ?> |
| 20 | 23 | </div> |
| 21 | 24 | </form> |
