<?php
/* Speichert Fabric.js-JSON für eine Seite + ggf. Notiz.
 * POST: pageid, fabric_json, note, token
 */
require_once __DIR__.'/_inc.php';

global $db, $user;
if (!$user->hasRight('bericht', 'write')) bericht_ajax_fail('Permission denied', 403);

$pageid = (int) ($_POST['pageid'] ?? 0);
if (!$pageid) bericht_ajax_fail('pageid fehlt');

$fabric = (string) ($_POST['fabric_json'] ?? '');
$note   = (string) ($_POST['note'] ?? '');

// Page laden
$res = $db->query("SELECT rowid FROM ".$db->prefix()."bericht_page WHERE rowid = ".((int) $pageid));
if (!$res || !$db->fetch_object($res)) bericht_ajax_fail('Page nicht gefunden', 404);

$sql = "UPDATE ".$db->prefix()."bericht_page SET "
    ."fabric_json = ".($fabric !== '' ? "'".$db->escape($fabric)."'" : "NULL").","
    ."note = ".($note !== '' ? "'".$db->escape($note)."'" : "NULL")
    ." WHERE rowid = ".((int) $pageid);
if (!$db->query($sql)) bericht_ajax_fail('DB-Fehler: '.$db->lasterror());

bericht_ajax_ok();