| @@ -10,13 +10,13 @@ | ||
| 10 | 10 | class StandaloneFormView |
| 11 | 11 | { |
| 12 | 12 | public static function preview() |
| 13 | 13 | { |
| 14 | - if (!current_user_can('manage_options')) { | |
| 14 | + if (!(current_user_can('manage_options') || current_user_can('manage_bitform'))) { | |
| 15 | 15 | auth_redirect(); |
| 16 | 16 | return; |
| 17 | 17 | } |
| 18 | - $requestUri = $_SERVER['REQUEST_URI']; | |
| 18 | + $requestUri = esc_url($_SERVER['REQUEST_URI']); | |
| 19 | 19 | $uri = explode('/', $requestUri); |
| 20 | 20 | |
| 21 | 21 | if (is_array($uri) && count($uri) > 0) { |
| 22 | 22 | $formID = $uri[count($uri) - 1]; |