| @@ -105,12 +105,8 @@ | ||
| 105 | 105 | |
| 106 | 106 | |
| 107 | 107 | $has_tabs = $fs->_add_tabs_before_content(); |
| 108 | 108 | |
| 109 | - if ( $has_tabs ) { | |
| 110 | - $query_params['tabs'] = 'true'; | |
| 111 | - } | |
| 112 | - | |
| 113 | 109 | // Aliases. |
| 114 | 110 | $download_latest_text = fs_text_x_inline( 'Download Latest', 'as download latest version', 'download-latest', $slug ); |
| 115 | 111 | $downgrading_plan_text = fs_text_inline( 'Downgrading your plan', 'downgrading-plan', $slug ); |
| 116 | 112 | $cancelling_subscription_text = fs_text_inline( 'Cancelling the subscription', 'cancelling-subscription', $slug ); |
| @@ -259,18 +255,18 @@ | ||
| 259 | 255 | ?> |
| 260 | 256 | <div class="wrap fs-section"> |
| 261 | 257 | <?php if ( ! $has_tabs && ! $fs->apply_filters( 'hide_account_tabs', false ) ) : ?> |
| 262 | 258 | <h2 class="nav-tab-wrapper"> |
| 263 | - <a href="<?php echo $fs->get_account_url() ?>" | |
| 259 | + <a href="<?php echo esc_url( $fs->get_account_url() ) ?>" | |
| 264 | 260 | class="nav-tab nav-tab-active"><?php fs_esc_html_echo_inline( 'Account', 'account', $slug ) ?></a> |
| 265 | 261 | <?php if ( $fs->has_addons() ) : ?> |
| 266 | - <a href="<?php echo $fs->_get_admin_page_url( 'addons' ) ?>" | |
| 262 | + <a href="<?php echo esc_url( $fs->_get_admin_page_url( 'addons' ) ) ?>" | |
| 267 | 263 | class="nav-tab"><?php echo esc_html( $addons_text ) ?></a> |
| 268 | 264 | <?php endif ?> |
| 269 | 265 | <?php if ( $show_upgrade ) : ?> |
| 270 | - <a href="<?php echo $fs->get_upgrade_url() ?>" class="nav-tab"><?php echo esc_html( $upgrade_text ) ?></a> | |
| 266 | + <a href="<?php echo esc_url( $fs->get_upgrade_url() ) ?>" class="nav-tab"><?php echo esc_html( $upgrade_text ) ?></a> | |
| 271 | 267 | <?php if ( $fs->apply_filters( 'show_trial', true ) && ! $fs->is_trial_utilized() && $fs->has_trial_plan() ) : ?> |
| 272 | - <a href="<?php echo $fs->get_trial_url() ?>" class="nav-tab"><?php fs_esc_html_echo_inline( 'Free Trial', 'free-trial', $slug ) ?></a> | |
| 268 | + <a href="<?php echo esc_url( $fs->get_trial_url() ) ?>" class="nav-tab"><?php fs_esc_html_echo_inline( 'Free Trial', 'free-trial', $slug ) ?></a> | |
| 273 | 269 | <?php endif ?> |
| 274 | 270 | <?php endif ?> |
| 275 | 271 | </h2> |
| 276 | 272 | <?php endif ?> |
| @@ -314,9 +310,9 @@ | ||
| 314 | 310 | <?php endif ?> |
| 315 | 311 | <?php if ( $is_paying ) : ?> |
| 316 | 312 | <?php if ( ! fs_is_network_admin() ) : ?> |
| 317 | 313 | <li> |
| 318 | - <form action="<?php echo $fs->_get_admin_page_url( 'account' ) ?>" method="POST"> | |
| 314 | + <form action="<?php echo esc_url( $fs->_get_admin_page_url( 'account' ) ) ?>" method="POST"> | |
| 319 | 315 | <input type="hidden" name="fs_action" value="deactivate_license"> |
| 320 | 316 | <?php wp_nonce_field( 'deactivate_license' ) ?> |
| 321 | 317 | <a href="#" class="fs-deactivate-license"><i |
| 322 | 318 | class="dashicons dashicons-admin-network"></i> <?php fs_echo_inline( 'Deactivate License', 'deactivate-license', $slug ) ?> |
| @@ -328,15 +324,15 @@ | ||
| 328 | 324 | <?php if ( ! $license->is_lifetime() && |
| 329 | 325 | $is_active_subscription |
| 330 | 326 | ) : ?> |
| 331 | 327 | <li> |
| 332 | - <form action="<?php echo $fs->_get_admin_page_url( 'account' ) ?>" method="POST"> | |
| 328 | + <form action="<?php echo esc_url( $fs->_get_admin_page_url( 'account' ) ) ?>" method="POST"> | |
| 333 | 329 | <input type="hidden" name="fs_action" value="downgrade_account"> |
| 334 | 330 | <?php wp_nonce_field( 'downgrade_account' ) ?> |
| 335 | 331 | <a href="#" |
| 336 | 332 | onclick="if ( confirm('<?php echo esc_attr( sprintf( |
| 337 | 333 | $downgrade_x_confirm_text, |
| 338 | - ( $fs->is_only_premium() ? $cancelling_subscription_text : $downgrading_plan_text ), | |
| 334 | + ( $fs->is_only_premium() ? $cancelling_subscription_text : $downgrading_plan_text ), | |
| 339 | 335 | $plan->title, |
| 340 | 336 | human_time_diff( time(), strtotime( $license->expiration ) ) |
| 341 | 337 | ) ) ?> <?php if ( ! $license->is_block_features ) { |
| 342 | 338 | echo esc_attr( sprintf( $after_downgrade_non_blocking_text, $plan->title, $fs->get_module_label( true ) ) ); |
| @@ -348,9 +344,9 @@ | ||
| 348 | 344 | <li> • </li> |
| 349 | 345 | <?php endif ?> |
| 350 | 346 | <?php if ( $is_plan_change_supported ) : ?> |
| 351 | 347 | <li> |
| 352 | - <a href="<?php echo $fs->get_upgrade_url() ?>"><i | |
| 348 | + <a href="<?php echo esc_url( $fs->get_upgrade_url() ) ?>"><i | |
| 353 | 349 | class="dashicons dashicons-grid-view"></i> <?php echo esc_html( $change_plan_text ) ?></a> |
| 354 | 350 | </li> |
| 355 | 351 | <li> • </li> |
| 356 | 352 | <?php endif ?> |
| @@ -355,9 +351,9 @@ | ||
| 355 | 351 | <li> • </li> |
| 356 | 352 | <?php endif ?> |
| 357 | 353 | <?php elseif ( $is_paid_trial ) : ?> |
| 358 | 354 | <li> |
| 359 | - <form action="<?php echo $fs->_get_admin_page_url( 'account' ) ?>" method="POST"> | |
| 355 | + <form action="<?php echo esc_url( $fs->_get_admin_page_url( 'account' ) ) ?>" method="POST"> | |
| 360 | 356 | <input type="hidden" name="fs_action" value="cancel_trial"> |
| 361 | 357 | <?php wp_nonce_field( 'cancel_trial' ) ?> |
| 362 | 358 | <a href="#" class="fs-cancel-trial"><i |
| 363 | 359 | class="dashicons dashicons-download"></i> <?php echo esc_html( $cancel_trial_text ) ?></a> |
| @@ -366,10 +362,10 @@ | ||
| 366 | 362 | <li> • </li> |
| 367 | 363 | <?php endif ?> |
| 368 | 364 | <?php endif ?> |
| 369 | 365 | <li> |
| 370 | - <form action="<?php echo $fs->_get_admin_page_url( 'account' ) ?>" method="POST"> | |
| 371 | - <input type="hidden" name="fs_action" value="<?php echo $fs->get_unique_affix() ?>_sync_license"> | |
| 366 | + <form action="<?php echo esc_url( $fs->_get_admin_page_url( 'account' ) ) ?>" method="POST"> | |
| 367 | + <input type="hidden" name="fs_action" value="<?php echo esc_attr( $fs->get_unique_affix() ) ?>_sync_license"> | |
| 372 | 368 | <?php wp_nonce_field( $fs->get_unique_affix() . '_sync_license' ) ?> |
| 373 | 369 | <a href="#" onclick="this.parentNode.submit(); return false;"><i |
| 374 | 370 | class="dashicons dashicons-image-rotate"></i> <?php fs_esc_html_echo_x_inline( 'Sync', 'as synchronize', 'sync', $slug ) ?></a> |
| 375 | 371 | </form> |
| @@ -511,11 +507,11 @@ | ||
| 511 | 507 | // to show current plan. |
| 512 | 508 | continue; |
| 513 | 509 | } |
| 514 | 510 | ?> |
| 515 | - <tr class="fs-field-<?php echo $p['id'] ?><?php if ( $odd ) : ?> alternate<?php endif ?>"> | |
| 511 | + <tr class="fs-field-<?php echo esc_attr( $p['id'] ) ?><?php if ( $odd ) : ?> alternate<?php endif ?>"> | |
| 516 | 512 | <td> |
| 517 | - <nobr><?php echo $p['title'] ?><?php echo ( ! empty( $p['title'] ) ) ? ':' : '' ?></nobr> | |
| 513 | + <nobr><?php echo esc_attr( $p['title'] ) ?><?php echo ( ! empty( $p['title'] ) ) ? ':' : '' ?></nobr> | |
| 518 | 514 | </td> |
| 519 | 515 | <td<?php if ( 'plan' === $p['id'] || 'bundle_plan' === $p['id'] ) { echo ' colspan="2"'; }?>> |
| 520 | 516 | <?php if ( in_array( $p['id'], array( 'license_key', 'site_secret_key' ) ) ) : ?> |
| 521 | 517 | <code><?php echo FS_Plugin_License::mask_secret_key_for_html( $p['value'] ) ?></code> |
| @@ -566,20 +562,20 @@ | ||
| 566 | 562 | 'class' => 'button-primary', |
| 567 | 563 | ); |
| 568 | 564 | fs_require_template( 'account/partials/activate-license-button.php', $view_params ); ?> |
| 569 | 565 | <?php else : ?> |
| 570 | - <form action="<?php echo $fs->_get_admin_page_url( 'account' ) ?>" | |
| 566 | + <form action="<?php echo esc_url( $fs->_get_admin_page_url( 'account' ) ) ?>" | |
| 571 | 567 | method="POST" class="button-group"> |
| 572 | 568 | <?php if ( $show_upgrade && $is_premium ) : ?> |
| 573 | - <a class="button activate-license-trigger <?php echo $fs->get_unique_affix() ?>" href="#"><?php fs_esc_html_echo_inline( 'Activate License', 'activate-license', $slug ) ?></a> | |
| 569 | + <a class="button activate-license-trigger <?php echo esc_attr( $fs->get_unique_affix() ) ?>" href="#"><?php fs_esc_html_echo_inline( 'Activate License', 'activate-license', $slug ) ?></a> | |
| 574 | 570 | <?php endif ?> |
| 575 | 571 | <input type="submit" class="button" |
| 576 | 572 | value="<?php echo esc_attr( $sync_license_text ) ?>"> |
| 577 | 573 | <input type="hidden" name="fs_action" |
| 578 | - value="<?php echo $fs->get_unique_affix() ?>_sync_license"> | |
| 574 | + value="<?php echo esc_attr( $fs->get_unique_affix() ) ?>_sync_license"> | |
| 579 | 575 | <?php wp_nonce_field( $fs->get_unique_affix() . '_sync_license' ) ?> |
| 580 | 576 | <?php if ( $show_upgrade || $is_plan_change_supported ) : ?> |
| 581 | - <a href="<?php echo $fs->get_upgrade_url() ?>" | |
| 577 | + <a href="<?php echo esc_url( $fs->get_upgrade_url() ) ?>" | |
| 582 | 578 | class="button<?php |
| 583 | 579 | echo $show_upgrade ? |
| 584 | 580 | ' button-primary fs-upgrade' : |
| 585 | 581 | ' fs-change-plan'; ?> button-upgrade"><i |