<?php

include("../init.php");

$core->Auth->checkAuth();

/*
if (isset($_POST['field']) && (!isset($_POST['id']) || !isset($_POST["type"])) ) {
	$core->Template->error("", "please do not open in new tab");
	exit;
}
*/

if (isset($_POST['field'])) {

	$id = $core->Cms->clean_block_id($_POST["id"]);
	$type = htmlentities($_POST["type"], ENT_QUOTES);
	$content = $_POST["field"];

	$core->Cms->update_block($id, $content);

	$core->Template->load(APP_PATH . "cms/views/v_saving.php");
}

else {
	if (isset($_GET['id']) == FALSE || isset($_GET['type']) == FALSE) {
		$core->Template->error();
		exit;
	}

	$id = $core->Cms->clean_block_id($_GET['id']);
	$type = htmlentities($_GET['type'], ENT_QUOTES);

	$content = $core->Cms->load_block($id);

	$core->Template->setData('block_id', $id);
	$core->Template->setData('block_type', $type);
	$core->Template->setData('cms_field', $core->Cms->generate_field($type, $content), false);

	// load view
	$core->Template->load(APP_PATH . 'cms/views/v_edit.php');

}


?>