2020/CVE-2020-23342/vultarget/anchor-cms/install/views/start.php
<?php echo $header; ?>

<section class="content">
  <article>
    <h1>Hello. Willkommen. Bonjour. Croeso.</h1>

    <p>If you were looking for a truly lightweight blogging experience, you&rsquo;ve
       found the right place. Simply fill in the details below, and you&rsquo;ll have your
       new blog set up in no time.</p>

      <?php echo Notify::read(); ?>
  </article>

  <form method="post" action="<?php echo uri_to('start'); ?>" autocomplete="off">

    <fieldset>
      <p>
        <label for="lang">
          <strong>Language</strong>
          <span class="info">Anchor's language.</span>
        </label>
        <select id="lang" class="chosen-select" name="language">
            <?php foreach ($languages as $lang): ?>
                <?php $selected = in_array($lang, $prefered_languages) ? ' selected' : ''; ?>
              <option<?php echo $selected; ?>><?php echo $lang; ?></option>
            <?php endforeach; ?>
        </select>
      </p>

      <p>
        <label for="timezone">
          <strong>Timezone</strong>
          <span class="info">Your current time zone.</span>
        </label>
        <select id="timezone" class="chosen-select" name="timezone">
            <?php $set = false; ?>
            <?php foreach ($timezones as $zone): ?>
                <?php $selected = ($set === false and $current_timezone == $zone['timezone_id']) ? ' selected' : ''; ?>
              <option value="<?php echo $zone['timezone_id']; ?>"<?php echo $selected; ?>>
                  <?php echo $zone['label']; ?>
              </option>
                <?php if ($selected) {
                    $set = true;
                } ?>
            <?php endforeach; ?>
        </select>
      </p>
    </fieldset>

    <section class="options">
      <button type="submit" class="btn">Next Step &raquo;</button>
    </section>
  </form>
</section>

<?php echo $footer; ?>
