<?
	/* 
	** if we have necessary fields, add discussion node
	*/
	
	if (isset($inputContent))
	{
		
		if((intval($pathway) <= 0) OR (!$UserInfo["Add Discussion"]))
		{
			/*
			** get pathway to Suggested Links
			*/
			$Query = "SELECT ID FROM pathway WHERE Name='Suggestions' ";
			$DatabaseResult = mysql_query($Query, $DatabaseLink);
			$DatabaseRow = mysql_fetch_row($DatabaseResult);
	
			//force pathway
			$pathway = $DatabaseRow[0];
	
			//force no sending of mail
			$inputSendMail = "CHECK";
		}
		
		// strip HTML tags from user input to guard against hacking
		
		$inputName = strip_tags($inputName);
		$inputDescription = strip_tags($inputDescription);
		$inputKeywords = strip_tags($inputKeywords);
		$inputResource = strip_tags($inputResource);
		
		// escape single quotes before forming query
	
		$inputName = addslashes($inputName);
		$inputDescription = addslashes($inputDescription);
		$inputKeywords = addslashes($inputKeywords);
		$inputResource = addslashes($inputResource);
	
		// make line breaks into HTML break tags
	
		$inputBody = ereg_replace("\n", "<BR>\n", $inputBody);
			
		
		/* 
		** check for duplicate 
		*/
		if ($inputResource != "")
		{	$Query = "SELECT ID FROM node WHERE Resource = '$inputResource' ";
			$DatabaseResult = mysql_query($Query, $DatabaseLink);
			if(mysql_NumRows($DatabaseResult) > 0)
			{
				$ActionResults .= "Warning: resource already present!<BR>";
			}
		}
		
	
		$Query = "INSERT INTO node ";
		$Query .= "(Parent, Creator, Name, Description, Keywords, Content, Icon, Resource, Created, LinkCount, DisplayOrder, LastChecked) "; 
		$Query .= "VALUES ( ";
		$Query .= "$pathway, ";
		$Query .= $UserInfo["ID"] . ", ";
		$Query .= "'" . $inputName . "', ";
		$Query .= "'" . $inputDescription . "', ";
		$Query .= "'" . $inputKeywords . "', ";
		$Query .= "$inputContent, ";
		$Query .= "'" . $inputIcon . "', ";
		$Query .= "'" . $inputResource . "', ";
		$Query .= "now(), ";
		$Query .= "0, ";
		$Query .= "$inputDisplayOrder, ";
		$Query .= "'1970-02-18')"; //check new links right away
		$DatabaseResult = mysql_query($Query, $DatabaseLink);
		if(!$DatabaseResult)
		{
			$ActionResults .= "Add failed: " . mysql_error();
		}
		else
		{
			$newnode = mysql_insert_id($DatabaseLink);
			
			// strip HTML tags from user input to guard against hacking
		
			$inputBody = strip_tags($inputBody);
		
			// escape single quotes before forming query
	
			$inputBody = addslashes($inputBody);
				
			$Query = "INSERT INTO discussion ";
			$Query .= "(Node, Parent, Creator, Created, Title, Body) ";
			$Query .= "VALUES ( ";
			$Query .= "$newnode, ";
			$Query .= "0, ";
			$Query .= $UserInfo["ID"] . ", ";
			$Query .= "now(), ";
			$Query .= "'" . $inputName . "', ";
			$Query .= "'" . $inputBody . "') ";
			
			$DatabaseResult = mysql_query($Query, $DatabaseLink);
			if(!$DatabaseResult)
			{
				$ActionResults .= "Add failed: " . mysql_error();
			}
			else
			{
			
				$ActionResults .= "Node Added!";
			}
		}
		
		/* 
		** send mail to the list 
		*/
		if($inputSendMail == "")
		{
			$ActionResults .= "<BR>\n";
			$ActionResults .= "Mail: ";			
		
			$Query = "SELECT Private ";
			$Query .= "FROM pathway ";
			$Query .= "WHERE ID=$pathway ";
			$DatabaseResult = mysql_query($Query, $DatabaseLink);
			$DatabaseRow = mysql_fetch_row($DatabaseResult);
			$isPrivate = $DatabaseRow[0];
	
			$MailBody .= "PATHWAY\n   $pathway_PlainName\n";
			$MailBody .= "   <http://www.leonatkinson.com/brain/index.php3?SCREEN=view&pathway=$pathway>\n\n";
			$MailBody .= "NODE\n   $inputTitle <http://www.leonatkinson.com/brain/location.php3?inputNode=$newnode>\n\n";
			$MailBody .= "DESCRIPTION\n   $inputDescription\n\n";
	
			if($isPrivate == "N")
			{
				$MailTo = "brain@onelist.com";
				$MailFrom = "leon@leonatkinson.com";
				$MailSubject = "$inputTitle";
	
	/*
				if(mail($MailTo, $MailSubject, $MailBody, "From: $MailFrom"))
				{
					$ActionResults .= "Sent!";
				}
				else
				{
					$ActionResults .= "Failed!";
				}
	*/			
			}
			else
			{
				$ActionResults .= "Private!";
			}
		}
		
		if(!$UserInfo["Add Discussion"])
		{
			$SCREEN="offer_thanks";
		}
	}
	else
	{
		$SCREEN="add_discussion";
		$ActionResults = "Plase select 'Threaded Discussion' or 'Bulletin Board'.";
	}

	
	
	
?>