<h2>' . $LANG['widgets_edit_title'] . '</h2> <div style="float:right; margin: 0 2px 0 0;"> <a href="?route=widgets.php&action=list" class="btn">' . $LANG['widgets_view'] . '</a> </div>'; if (!empty($LANG['widgets_edit_subtitle'])) { echo '<span>' . $LANG['widgets_edit_subtitle'] . '</span>'; } echo '</div>'; if (isset($_GET['id']) && \query\main::widget_exists($_GET['id'])) { $info = \query\main::widget_infos($_GET['id']); if ($widget = widgets::widget_from_id($info->widget_id)) { if ($_SERVER['REQUEST_METHOD'] == 'POST' && check_csrf($_POST['csrf'], 'widgets2_csrf')) { if (isset($_POST['title']) && isset($_POST['position'])) { if (actions::edit_widget($_GET['id'], array('title' => $_POST['title'], 'position' => $_POST['position'], 'text' => isset($_POST['text']) ? $_POST['text'] : '', 'type' => isset($_POST['type']) ? $_POST['type'] : '', 'order' => isset($_POST['orderby']) ? $_POST['orderby'] : '', 'limit' => isset($_POST['limit']) ? $_POST['limit'] : '', 'allow_html' => !empty($widget->allow_html) && isset($_POST['html']) ? 1 : 0, 'mobi_view' => isset($_POST['mobi_view']) ? 1 : 0))) { $info = \query\main::widget_infos($_GET['id']); echo '<div class="a-success">' . $LANG['msg_saved'] . '</div>'; } else { echo '<div class="a-error">' . $LANG['msg_error'] . '</div>'; } } } $csrf = $_SESSION['widgets2_csrf'] = \site\utils::str_random(10); echo '<div class="form-table"> <form action="#" method="POST" enctype="multipart/form-data"> <div class="row"><span>' . $LANG['form_title'] . ':</span><div><input type="text" name="title" value="' . $info->title . '" /></div></div> <div class="row"><span>' . $LANG['form_position'] . ':</span><div><input type="number" name="position" value="' . $info->position . '" min="1" /></div></div>'; if (!empty($widget->allow_text)) { echo '<div class="row"><span>' . $LANG['form_text'] . ':</span><div><textarea name="text">' . $info->text . '</textarea></div></div>';