<?
	/* 
	** if we have necessary fields, add pathway
	*/
	if($UserInfo["Add Pathway"])
	{
	
		// strip HTML tags from user input to guard against hacking
		
		$inputName = strip_tags($inputName);
		$inputDescription = strip_tags($inputDescription);
		$inputDisplayOrder = strip_tags($inputDisplayOrder);
	
		// escape single quotes before forming query
		
		$inputName = addslashes($inputName);
		$inputDescription = addslashes($inputDescription);
		$inputDisplayOrder = addslashes($inputDisplayOrder);
				
		$Query = "INSERT INTO pathway (Name, Description, Owner, Parent, Icon, Layout, Private, DisplayOrder) VALUES ";
		$Query .= "('$inputName', '$inputDescription', $Session_User, $pathway, '$inputIcon', $inputLayout, '$inputPrivacy', '$inputDisplayOrder')";
	
		$DatabaseResult = mysql_query($Query, $DatabaseLink);
		if(!$DatabaseResult)
		{
			$ActionResults = "Add failed: " . mysql_error();
		}
		else
		{
			$ActionResults = "Pathway Added!";
		}
	}

?>
