| @@ -1,13 +1,18 @@ | ||
| 1 | -<form id="acym_form" action="<?php echo acym_completeLink(acym_getVar('cmd', 'ctrl')); ?>" method="post" name="acyForm" novalidate data-abide> | |
| 2 | - <input type="hidden" id="acym__form__structure" value="<?php echo acym_escape(json_encode($data['form'])); ?>"> | |
| 1 | +<?php | |
| 2 | +defined('ABSPATH') || die('Restricted Access'); | |
| 3 | +?> | |
| 4 | +<form id="acym_form" action="<?php echo esc_url(acym_completeLink(acym_getVar('cmd', 'ctrl'))); ?>" method="post" name="acyForm" novalidate data-abide> | |
| 5 | + <input type="hidden" id="acym__form__structure" value="<?php echo esc_attr(json_encode($data['form'])); ?>"> | |
| 3 | 6 | <div id="acym__forms" class="grid-x"> |
| 4 | 7 | <div class="cell grid-x align-right grid-margin-x margin-y margin-left-0 margin-bottom-1 padding-bottom-0 acym__content"> |
| 5 | - <?php echo acym_cancelButton('ACYM_CANCEL', '', 'button cell medium-6 large-shrink'); ?> | |
| 8 | + <?php acym_cancelButton('ACYM_CANCEL', '', 'button cell medium-6 large-shrink'); ?> | |
| 6 | 9 | <button class="cell medium-6 large-shrink button button-secondary" type="button" @click="save(false)" id="acy__form__save"> |
| 7 | - <?php echo acym_translation('ACYM_SAVE'); ?> | |
| 10 | + <?php echo esc_html(acym_translation('ACYM_SAVE')); ?> | |
| 8 | 11 | </button> |
| 9 | - <button class="cell medium-6 large-shrink button" type="button" @click="save(true)" id="acy__form__save_exit"><?php echo acym_translation('ACYM_SAVE_EXIT'); ?></button> | |
| 12 | + <button class="cell medium-6 large-shrink button" type="button" @click="save(true)" id="acy__form__save_exit"><?php echo esc_html( | |
| 13 | + acym_translation('ACYM_SAVE_EXIT') | |
| 14 | + ); ?></button> | |
| 10 | 15 | </div> |
| 11 | 16 | <div class="cell"> |
| 12 | 17 | <div class="grid-x grid-margin-x"> |
| 13 | 18 | <div class="cell large-8 medium-7 grid-x" id="acym__forms__left"> |
