<?
	/* 
	** if we have necessary fields, add thread to discussion node
	*/
	
	if((intval($pathway) <= 0) OR (!$UserInfo["Login"]))
	{
		/*
		** get pathway to Suggested Links
		*/
		$Query = "SELECT ID FROM pathway WHERE Name='Suggestions' ";
		$DatabaseResult = mysql_query($Query, $DatabaseLink);
		$DatabaseRow = mysql_fetch_row($DatabaseResult);

		//force pathway
		$pathway = $DatabaseRow[0];

		//force no sending of mail
		$inputSendMail = "CHECK";
	}
	
	if (!($UserInfo["ID"] > 0) || ($Anonymous == "Yes"))
	{
		$Poster = 0;
	}
	else
	{
		$Poster = $UserInfo["ID"];
	}
	
	// strip HTML tags from user input to guard against hacking
		
	$inputTitle = strip_tags($inputTitle);
	$inputBody = strip_tags($inputBody);	
	
	// escape single quotes before forming query
	
	$inputTitle = addslashes($inputTitle);
	$inputBody = addslashes($inputBody);
	
	// make line breaks into HTML break tags
	
	$inputBody = ereg_replace("\n", "<BR>\n", $inputBody);
		
	
	$Query = "INSERT INTO discussion ";
	$Query .= "(Node, Parent, Creator, Created, Title, Body) ";
	$Query .= "VALUES ( ";
	$Query .= "$node, ";
	$Query .= "$parent, ";
	$Query .= $Poster . ", ";
	$Query .= "now(), ";
	$Query .= "'" . $inputTitle . "', ";
	$Query .= "'" . $inputBody . "') ";
	
	$DatabaseResult = mysql_query($Query, $DatabaseLink);
	if(!$DatabaseResult)
	{
		$ActionResults .= "Add failed: " . mysql_error();
	}
	else
	{
	
		$ActionResults .= "Message Added!";
	}
		
?>