| @@ -1444,9 +1444,9 @@ | ||
| 1444 | 1444 | </style> |
| 1445 | 1445 | <?php |
| 1446 | 1446 | } |
| 1447 | 1447 | ?> |
| 1448 | - <div class="wpfnl-optin-form-wrapper <?php echo isset($settings['optin_form_layout']) ? $settings['optin_form_layout'] : ''; ?>" > | |
| 1448 | + <div class="wpfnl-optin-form-wrapper <?php echo isset($settings['optin_form_layout']) ? esc_attr( $settings['optin_form_layout'] ) : ''; ?>" > | |
| 1449 | 1449 | <?php if( isset($settings['first_name']) && 'yes' == $settings['first_name'] ){ ?> |
| 1450 | 1450 | <div class="wpfnl-optin-form-group first-name"> |
| 1451 | 1451 | |
| 1452 | 1452 | <?php if( isset($settings['field_label']) && 'yes' == $settings['field_label'] ){ ?> |
| @@ -1451,9 +1451,9 @@ | ||
| 1451 | 1451 | |
| 1452 | 1452 | <?php if( isset($settings['field_label']) && 'yes' == $settings['field_label'] ){ ?> |
| 1453 | 1453 | <label for="wpfnl-first-name"> |
| 1454 | 1454 | <?php |
| 1455 | - echo isset($settings['first_name_label']) && $settings['first_name_label'] ? $settings['first_name_label'] : __('First Name','wpfnl'); | |
| 1455 | + echo wp_kses_post( isset($settings['first_name_label']) && $settings['first_name_label'] ? $settings['first_name_label'] : __('First Name','wpfnl') ); | |
| 1456 | 1456 | |
| 1457 | 1457 | if( isset($settings['is_required_name']) && 'yes' == $settings['is_required_name'] ){ ?> |
| 1458 | 1458 | <span class="required-mark">*</span> |
| 1459 | 1459 | <?php } ?> |
| @@ -1467,9 +1467,9 @@ | ||
| 1467 | 1467 | </span> |
| 1468 | 1468 | <?php } |
| 1469 | 1469 | $f_name_placeholder = isset($settings['first_name_placeholder']) ? $settings['first_name_placeholder'] : ''; |
| 1470 | 1470 | ?> |
| 1471 | - <input type="text" name="first_name" class="wpfnl-first-name" id="wpfnl-first-name" placeholder="<?php echo $f_name_placeholder; ?>" <?php echo isset($settings['is_required_name']) && 'yes' == $settings['is_required_name'] ? 'required' : ''; ?> > | |
| 1471 | + <input type="text" name="first_name" class="wpfnl-first-name" id="wpfnl-first-name" placeholder="<?php echo esc_attr( $f_name_placeholder ); ?>" <?php echo isset($settings['is_required_name']) && 'yes' == $settings['is_required_name'] ? 'required' : ''; ?> > | |
| 1472 | 1472 | </span> |
| 1473 | 1473 | |
| 1474 | 1474 | </div> |
| 1475 | 1475 | <?php } ?> |
| @@ -1479,9 +1479,9 @@ | ||
| 1479 | 1479 | |
| 1480 | 1480 | <?php if( isset($settings['field_label']) & 'yes' == $settings['field_label'] ){ ?> |
| 1481 | 1481 | <label for="wpfnl-last-name"> |
| 1482 | 1482 | <?php |
| 1483 | - echo isset($settings['last_name_label']) && $settings['last_name_label'] ? $settings['last_name_label'] : __('Last Name','wpfnl'); | |
| 1483 | + echo wp_kses_post( isset($settings['last_name_label']) && $settings['last_name_label'] ? $settings['last_name_label'] : __('Last Name','wpfnl') ); | |
| 1484 | 1484 | |
| 1485 | 1485 | if( isset($settings['is_required_last_name']) && 'yes' == $settings['is_required_last_name'] ){ ?> |
| 1486 | 1486 | <span class="required-mark">*</span> |
| 1487 | 1487 | <?php } ?> |
| @@ -1495,9 +1495,9 @@ | ||
| 1495 | 1495 | </span> |
| 1496 | 1496 | <?php } |
| 1497 | 1497 | $l_name_placeholder = isset($settings['last_name_placeholder']) ? $settings['last_name_placeholder'] : ''; |
| 1498 | 1498 | ?> |
| 1499 | - <input type="text" name="last_name" class="wpfnl-last-name" id="wpfnl-last-name" placeholder="<?php echo $l_name_placeholder;?>" <?php echo isset($settings['is_required_last_name']) && 'yes' == $settings['is_required_last_name'] ? 'required' : ''; ?> > | |
| 1499 | + <input type="text" name="last_name" class="wpfnl-last-name" id="wpfnl-last-name" placeholder="<?php echo esc_attr( $l_name_placeholder ); ?>" <?php echo isset($settings['is_required_last_name']) && 'yes' == $settings['is_required_last_name'] ? 'required' : ''; ?> > | |
| 1500 | 1500 | </span> |
| 1501 | 1501 | </div> |
| 1502 | 1502 | <?php } ?> |
| 1503 | 1503 | |
| @@ -1504,9 +1504,9 @@ | ||
| 1504 | 1504 | <div class="wpfnl-optin-form-group email"> |
| 1505 | 1505 | <?php if( isset($settings['field_label']) && 'yes' == $settings['field_label'] ){ ?> |
| 1506 | 1506 | <label for="wpfnl-email"> |
| 1507 | 1507 | <?php |
| 1508 | - echo isset($settings['email_label']) && $settings['email_label'] ? $settings['email_label'] : __('Email','wpfnl'); | |
| 1508 | + echo wp_kses_post( isset($settings['email_label']) && $settings['email_label'] ? $settings['email_label'] : __('Email','wpfnl') ); | |
| 1509 | 1509 | |
| 1510 | 1510 | if( isset($settings['required_mark']) && 'yes' == $settings['required_mark'] ){ ?> |
| 1511 | 1511 | <span class="required-mark">*</span> |
| 1512 | 1512 | <?php } ?> |
| @@ -1519,9 +1519,9 @@ | ||
| 1519 | 1519 | </span> |
| 1520 | 1520 | <?php } |
| 1521 | 1521 | $email_placeholder = isset($settings['email_placeholder']) ? $settings['email_placeholder'] : ''; |
| 1522 | 1522 | ?> |
| 1523 | - <input type="email" name="email" class="wpfnl-email" id="wpfnl-email" placeholder="<?php echo $email_placeholder; ?>" pattern="[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$" required > | |
| 1523 | + <input type="email" name="email" class="wpfnl-email" id="wpfnl-email" placeholder="<?php echo esc_attr( $email_placeholder ); ?>" pattern="[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$" required > | |
| 1524 | 1524 | </span> |
| 1525 | 1525 | </div> |
| 1526 | 1526 | |
| 1527 | 1527 | <?php if( isset($settings['phone']) && 'yes' == $settings['phone'] ){ ?> |
| @@ -1529,9 +1529,9 @@ | ||
| 1529 | 1529 | |
| 1530 | 1530 | <?php if( isset($settings['field_label']) && 'yes' == $settings['field_label'] ){ ?> |
| 1531 | 1531 | <label for="wpfnl-phone"> |
| 1532 | 1532 | <?php |
| 1533 | - echo isset($settings['phone_label']) && $settings['phone_label'] ? $settings['phone_label'] : __('Phone','wpfnl'); | |
| 1533 | + echo wp_kses_post( isset($settings['phone_label']) && $settings['phone_label'] ? $settings['phone_label'] : __('Phone','wpfnl') ); | |
| 1534 | 1534 | |
| 1535 | 1535 | if( isset($settings['is_required_phone']) && 'yes' == $settings['is_required_phone'] ){ ?> |
| 1536 | 1536 | <span class="required-mark">*</span> |
| 1537 | 1537 | <?php } ?> |
| @@ -1545,9 +1545,9 @@ | ||
| 1545 | 1545 | </span> |
| 1546 | 1546 | <?php } |
| 1547 | 1547 | $phone_placeholder = isset($settings['phone_placeholder']) && $settings['phone_placeholder'] ? $settings['phone_placeholder'] : ''; |
| 1548 | 1548 | ?> |
| 1549 | - <input type="text" name="phone" class="wpfnl-phone" id="wpfnl-phone" placeholder="<?php echo $phone_placeholder; ?>" <?php echo isset($settings['is_required_phone']) && 'yes' == $settings['is_required_phone'] ? 'required' : ''; ?> > | |
| 1549 | + <input type="text" name="phone" class="wpfnl-phone" id="wpfnl-phone" placeholder="<?php echo esc_attr( $phone_placeholder ); ?>" <?php echo isset($settings['is_required_phone']) && 'yes' == $settings['is_required_phone'] ? 'required' : ''; ?> > | |
| 1550 | 1550 | </span> |
| 1551 | 1551 | </div> |
| 1552 | 1552 | <?php } ?> |
| 1553 | 1553 | |
| @@ -1556,9 +1556,9 @@ | ||
| 1556 | 1556 | |
| 1557 | 1557 | <?php if( isset($settings['field_label']) && 'yes' == $settings['field_label'] ){ ?> |
| 1558 | 1558 | <label for="wpfnl-web-url"> |
| 1559 | 1559 | <?php |
| 1560 | - echo isset($settings['website_url_label']) && $settings['website_url_label'] ? $settings['website_url_label'] : __('Website Url','wpfnl'); | |
| 1560 | + echo wp_kses_post( isset($settings['website_url_label']) && $settings['website_url_label'] ? $settings['website_url_label'] : __('Website Url','wpfnl') ); | |
| 1561 | 1561 | |
| 1562 | 1562 | if( isset($settings['is_required_website_url']) && 'yes' == $settings['is_required_website_url'] ){ ?> |
| 1563 | 1563 | <span class="required-mark">*</span> |
| 1564 | 1564 | <?php } ?> |
| @@ -1572,9 +1572,9 @@ | ||
| 1572 | 1572 | </span> |
| 1573 | 1573 | <?php } |
| 1574 | 1574 | $weburl_placeholder = isset($settings['website_url_placeholder']) && $settings['website_url_placeholder'] ? $settings['website_url_placeholder'] : ''; |
| 1575 | 1575 | ?> |
| 1576 | - <input type="text" name="web-url" class="wpfnl-web-url" id="wpfnl-web-url" pattern="(https?://)?.+" size="30" placeholder="<?php echo $weburl_placeholder; ?>" <?php echo isset($settings['is_required_website_url']) && 'yes' == $settings['is_required_website_url'] ? 'required' : ''; ?> > | |
| 1576 | + <input type="text" name="web-url" class="wpfnl-web-url" id="wpfnl-web-url" pattern="(https?://)?.+" size="30" placeholder="<?php echo esc_attr( $weburl_placeholder ); ?>" <?php echo isset($settings['is_required_website_url']) && 'yes' == $settings['is_required_website_url'] ? 'required' : ''; ?> > | |
| 1577 | 1577 | </span> |
| 1578 | 1578 | </div> |
| 1579 | 1579 | <?php } ?> |
| 1580 | 1580 | |
| @@ -1583,9 +1583,9 @@ | ||
| 1583 | 1583 | |
| 1584 | 1584 | <?php if( isset($settings['field_label']) && 'yes' == $settings['field_label'] ){ ?> |
| 1585 | 1585 | <label for="wpfnl-message"> |
| 1586 | 1586 | <?php |
| 1587 | - echo isset($settings['message_label']) && $settings['message_label'] ? $settings['message_label'] : __('Message','wpfnl'); | |
| 1587 | + echo wp_kses_post( isset($settings['message_label']) && $settings['message_label'] ? $settings['message_label'] : __('Message','wpfnl') ); | |
| 1588 | 1588 | |
| 1589 | 1589 | if( isset($settings['is_required_message']) && 'yes' == $settings['is_required_message'] ){ ?> |
| 1590 | 1590 | <span class="required-mark">*</span> |
| 1591 | 1591 | <?php } ?> |
| @@ -1595,9 +1595,9 @@ | ||
| 1595 | 1595 | $message_placeholder = isset($settings['message_placeholder']) && $settings['message_placeholder'] ? $settings['message_placeholder'] : ''; |
| 1596 | 1596 | ?> |
| 1597 | 1597 | |
| 1598 | 1598 | <span class="input-wrapper"> |
| 1599 | - <textarea name="message" class="wpfnl-message" id="wpfnl-message" cols="30" rows="3" placeholder="<?php echo $message_placeholder; ?>" <?php echo isset($settings['is_required_message']) && 'yes' == $settings['is_required_message'] ? 'required' : ''; ?> ></textarea> | |
| 1599 | + <textarea name="message" class="wpfnl-message" id="wpfnl-message" cols="30" rows="3" placeholder="<?php echo esc_attr( $message_placeholder ); ?>" <?php echo isset($settings['is_required_message']) && 'yes' == $settings['is_required_message'] ? 'required' : ''; ?> ></textarea> | |
| 1600 | 1600 | </span> |
| 1601 | 1601 | </div> |
| 1602 | 1602 | <?php } ?> |
| 1603 | 1603 | |
| @@ -1609,9 +1609,9 @@ | ||
| 1609 | 1609 | |
| 1610 | 1610 | <label for="wpfnl-acceptance_checkbox-<?php echo $randomId; ?>"> |
| 1611 | 1611 | <span class="check-box"></span> |
| 1612 | 1612 | <?php |
| 1613 | - echo isset($settings['acceptance_checkbox_text']) && $settings['acceptance_checkbox_text'] ? $settings['acceptance_checkbox_text'] : ''; | |
| 1613 | + echo wp_kses_post( isset($settings['acceptance_checkbox_text']) && $settings['acceptance_checkbox_text'] ? $settings['acceptance_checkbox_text'] : '' ); | |
| 1614 | 1614 | |
| 1615 | 1615 | if( isset($settings['is_required_acceptance']) && 'yes' == $settings['is_required_acceptance'] ){ |
| 1616 | 1616 | echo '<span class="required-mark">*</span>'; |
| 1617 | 1617 | } |
| @@ -1634,9 +1634,9 @@ | ||
| 1634 | 1634 | |
| 1635 | 1635 | <label for="wpfnl-registration_checkbox-<?php echo $randomId; ?>"> |
| 1636 | 1636 | <span class="check-box"></span> |
| 1637 | 1637 | <?php |
| 1638 | - echo isset($settings['allow_user_registration_permission_text']) && $settings['allow_user_registration_permission_text'] ? $settings['allow_user_registration_permission_text'] : ''; | |
| 1638 | + echo wp_kses_post( isset($settings['allow_user_registration_permission_text']) && $settings['allow_user_registration_permission_text'] ? $settings['allow_user_registration_permission_text'] : '' ); | |
| 1639 | 1639 | ?> |
| 1640 | 1640 | <span class="required-mark">*</span> |
| 1641 | 1641 | </label> |
| 1642 | 1642 | </div> |
| @@ -1718,9 +1718,9 @@ | ||
| 1718 | 1718 | ob_start(); |
| 1719 | 1719 | Wpfnl_Widgets_Manager::render_mailmint_form( $settings[ 'mailmint_form_id' ] ); |
| 1720 | 1720 | $mailmint_form = ob_get_clean(); |
| 1721 | 1721 | $replace = 'id="mrm-form">'; |
| 1722 | - $replace .= '<input type="hidden" name="widget_id" value="'.$settings[ 'mailmint_form_id' ].'"/>'; | |
| 1722 | + $replace .= '<input type="hidden" name="widget_id" value="'.esc_attr( $settings[ 'mailmint_form_id' ] ).'"/>'; | |
| 1723 | 1723 | if ( !empty( $settings[ 'data_to_checkout' ] ) && 'yes' == $settings[ 'data_to_checkout' ] ) { |
| 1724 | 1724 | $replace .= '<input type="hidden" name="data_to_checkout" value="yes"/>'; |
| 1725 | 1725 | } |
| 1726 | 1726 | if ( !empty( $settings[ 'allow_registration' ] ) && 'yes' == $settings[ 'allow_registration' ] ) { |