| @@ -1,16 +1,20 @@ | ||
| 1 | +<?php | |
| 2 | +// phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound -- View file, its variables are local to the include scope, not true globals. | |
| 3 | +defined('ABSPATH') || die('Restricted Access'); | |
| 4 | +?> | |
| 1 | 5 | <input type="hidden" name="ctrl" value="frontusers" /> |
| 2 | 6 | <input type="hidden" name="task" value="notask" /> |
| 3 | 7 | <input type="hidden" name="page" value="acymailing_front" /> |
| 4 | -<input type="hidden" name="option" value="<?php echo acym_escape(ACYM_COMPONENT); ?>" /> | |
| 5 | -<input type="hidden" name="acy_source" value="Form ID <?php echo $form->id; ?>"> | |
| 6 | -<input type="hidden" name="acyformname" value="<?php echo acym_escape($form->form_tag_name); ?>"> | |
| 7 | -<input type="hidden" name="acymformtype" value="<?php echo acym_escape($form->type); ?>"> | |
| 8 | +<input type="hidden" name="option" value="<?php echo esc_attr(ACYM_COMPONENT); ?>" /> | |
| 9 | +<input type="hidden" name="acy_source" value="Form ID <?php echo intval($form->id); ?>"> | |
| 10 | +<input type="hidden" name="acyformname" value="<?php echo esc_attr($form->form_tag_name); ?>"> | |
| 11 | +<input type="hidden" name="acymformtype" value="<?php echo esc_attr($form->type); ?>"> | |
| 8 | 12 | <input type="hidden" name="acysubmode" value="form_acym"> |
| 9 | 13 | |
| 10 | 14 | <?php |
| 11 | 15 | $redirection = $form->settings['redirection']['after_subscription']; |
| 12 | -$ajax = empty($redirection) && $form->type !== $form->formClass::SUB_FORM_TYPE_SHORTCODE ? '1' : '0'; | |
| 16 | +$ajax = empty($redirection) ? '1' : '0'; | |
| 13 | 17 | |
| 14 | 18 | $confirmationMessage = ''; |
| 15 | 19 | if (!empty($form->settings['redirection']['confirmation_message'])) { |
| 16 | 20 | $confirmationMessage = $form->settings['redirection']['confirmation_message']; |
| @@ -19,9 +23,9 @@ | ||
| 19 | 23 | if (acym_isMultilingual() && !empty($form->settings['redirection']['langConfirm'][$currentLanguageTag])) { |
| 20 | 24 | $confirmationMessage = $form->settings['redirection']['langConfirm'][$currentLanguageTag]; |
| 21 | 25 | } |
| 22 | 26 | ?> |
| 23 | -<input type="hidden" name="redirect" value="<?php echo $redirection; ?>"> | |
| 24 | -<input type="hidden" name="ajax" value="<?php echo $ajax; ?>"> | |
| 27 | +<input type="hidden" name="redirect" value="<?php echo esc_url($redirection); ?>"> | |
| 28 | +<input type="hidden" name="ajax" value="<?php echo esc_attr($ajax); ?>"> | |
| 25 | 29 | <input type="hidden" |
| 26 | - name="confirmation_message" | |
| 27 | - value="<?php echo acym_escape($confirmationMessage); ?>"> | |
| 30 | + name="confirmation_message" | |
| 31 | + value="<?php echo esc_attr($confirmationMessage); ?>"> | |
