← All changes | back/Views/Lists/tmpl/settings.php +11 -7 10.2.2 → 11.1.0 View file →

		@@ -1,6 +1,10 @@
	1	+<?php
	2	+// phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound -- View file, its variables are local to the include scope, not true globals.
	3	+defined('ABSPATH') || die('Restricted Access');
	4	+?>
1	5	<div id="acym__list__settings">
2		- <form id="acym_form" action="<?php echo acym_completeLink(acym_getVar('cmd', 'ctrl')); ?>" method="post" name="acyForm" data-abide novalidate>
	6	+ <form id="acym_form" action="<?php echo esc_url(acym_completeLink(acym_getVar('cmd', 'ctrl'))); ?>" method="post" name="acyForm" data-abide novalidate>
3	7	<div class="cell grid-x text-right grid-margin-x margin-left-0 margin-right-0 margin-bottom-0 margin-y acym__content" id="acym__list__settings__actions">
4	8	<?php include acym_getView('lists', 'settings_actions'); ?>
5	9	</div>
6	10	<div class="acym__content margin-top-1">
		@@ -5,13 +9,13 @@
5	9	</div>
6	10	<div class="acym__content margin-top-1">
7	11	<?php
8	12	$workflow = $data['workflowHelper'];
9		- echo $workflow->displayTabs(
	13	+ $workflow->displayTabs(
10	14	$this->tabs,
11	15	$data['currentTab'],
12	16	[
13		- 'query' => '&listId='.acym_escape($data['listInformation']->id).'&task=settings&step=',
	17	+ 'query' => '&listId='.esc_attr($data['listInformation']->id).'&task=settings&step=',
14	18	'disableTabs' => empty($data['listInformation']->id) ? $this->disableTabs : [],
15	19	]
16	20	); ?>
17	21	<?php
		@@ -37,11 +41,11 @@
37	41	<?php }
38	42	?>
39	43	</div>
40	44
41		- <input type="hidden" name="listId" value="<?php echo acym_escape($data['listInformation']->id); ?>">
42		- <input type="hidden" name="list[welcome_id]" value="<?php echo acym_escape($data['listInformation']->welcome_id); ?>">
43		- <input type="hidden" name="list[unsubscribe_id]" value="<?php echo acym_escape($data['listInformation']->unsubscribe_id); ?>">
44		- <input type="hidden" name="step" value="<?php echo acym_escape($data['currentTab']); ?>">
	45	+ <input type="hidden" name="listId" value="<?php echo esc_attr($data['listInformation']->id ?? ''); ?>">
	46	+ <input type="hidden" name="list[welcome_id]" value="<?php echo esc_attr($data['listInformation']->welcome_id ?? ''); ?>">
	47	+ <input type="hidden" name="list[unsubscribe_id]" value="<?php echo esc_attr($data['listInformation']->unsubscribe_id ?? ''); ?>">
	48	+ <input type="hidden" name="step" value="<?php echo esc_attr($data['currentTab'] ?? ''); ?>">
45	49	<?php acym_formOptions(true, 'settings'); ?>
46	50	</form>
47	51	</div>