<?

	/* 
	** if we have necessary fields, add link
	*/
	if((intval($pathway) <= 0) OR (!$UserInfo["Add Link"]))
	{
		/*
		** get pathway to Suggested Links
		*/
		$Query = "SELECT ID FROM pathway WHERE Name='Suggestions' ";
		$DatabaseResult = mysql_query($Query, $DatabaseLink);
		$DatabaseRow = mysql_fetch_row($DatabaseResult);

		//force pathway
		$pathway = $DatabaseRow[0];

		//force no sending of mail
		$inputSendMail = "CHECK";
		
	}
	
	
	// strip HTML tags from user input to guard against hacking
		
	$inputName = strip_tags($inputName);
	$inputDescription = strip_tags($inputDescription);
	$inputKeywords = strip_tags($inputKeywords);
	$inputResource = strip_tags($inputResource);
		
	// escape single quotes before forming query
	
	$inputName = addslashes($inputName);
	$inputDescription = addslashes($inputDescription);
	$inputKeywords = addslashes($inputKeywords);
	$inputResource = addslashes($inputResource);
	
	
	/* 
	** check for duplicate 
	*/
	$Query = "SELECT ID FROM node WHERE Resource = '$inputResource' ";
	$DatabaseResult = mysql_query($Query, $DatabaseLink);
	if(mysql_NumRows($DatabaseResult) > 0)
	{
		$ActionResults .= "Warning: resource already present!<BR>";
	}
	

	
	$Query = "INSERT INTO node ";
	$Query .= "(Parent, Creator, Name, Description, Keywords, Content, Icon, Resource, Created, LinkCount, DisplayOrder, LastChecked) "; 
	$Query .= "VALUES ( ";
	$Query .= "$pathway, ";
	if ($UserInfo["ID"])
	{
		$Query .= $UserInfo["ID"] . ", ";
	}
	else
	{
		$Query .= "0, ";
	}
	$Query .= "'" . $inputName . "', ";
	$Query .= "'" . $inputDescription . "', ";
	$Query .= "'" . $inputKeywords . "', ";
	$Query .= "$inputContent, ";
	$Query .= "'" . $inputIcon. "', ";
	$Query .= "'" . $inputResource . "', ";
	$Query .= "now(), ";
	$Query .= "0, ";
	$Query .= "$inputDisplayOrder, ";
	$Query .= "'1970-02-18')"; //check new links right away
	
	
	$DatabaseResult = mysql_query($Query, $DatabaseLink);
	if(!$DatabaseResult)
	{
		$ActionResults .= "Add failed: " . mysql_error();
	}
	else
	{
		$ActionResults .= "Node Added!";
	}
	
	$newnode = mysql_insert_id($DatabaseLink);

	/* 
	** send mail to the list 
	*/
	if($inputSendMail == "")
	{
		$ActionResults .= "<BR>\n";
		$ActionResults .= "Mail: ";			
	
		$Query = "SELECT Private ";
		$Query .= "FROM pathway ";
		$Query .= "WHERE ID=$pathway ";
		$DatabaseResult = mysql_query($Query, $DatabaseLink);
		$DatabaseRow = mysql_fetch_row($DatabaseResult);
		$isPrivate = $DatabaseRow[0];

		$MailBody .= "PATHWAY\n   $pathway_PlainName\n";
		$MailBody .= "   <http://www.leonatkinson.com/brain/index.php3?SCREEN=view&pathway=$pathway>\n\n";
		$MailBody .= "NODE\n   $inputTitle <http://www.leonatkinson.com/brain/location.php3?inputNode=$newnode>\n\n";
		$MailBody .= "DESCRIPTION\n   $inputDescription\n\n";

		if($isPrivate == "N")
		{
			$MailTo = "brain@onelist.com";
			$MailFrom = "leon@leonatkinson.com";
			$MailSubject = "$inputTitle";

/*
			if(mail($MailTo, $MailSubject, $MailBody, "From: $MailFrom"))
			{
				$ActionResults .= "Sent!";
			}
			else
			{
				$ActionResults .= "Failed!";
			}
*/			
		}
		else
		{
			$ActionResults .= "Private!";
		}
	}
	
	

?>