<?

	/* 
	** if we have necessary fields, add vote
	*/
	if((intval($pathway) <= 0) OR (!$UserInfo["Add Vote"]))
	{
		/*
		** get pathway to Suggested Links
		*/
		$Query = "SELECT ID FROM pathway WHERE Name='Suggestions' ";
		$DatabaseResult = mysql_query($Query, $DatabaseLink);
		$DatabaseRow = mysql_fetch_row($DatabaseResult);

		//force pathway
		$pathway = $DatabaseRow[0];

		//force no sending of mail
		$inputSendMail = "CHECK";
	}
	
	// strip HTML tags from user input to guard against hacking
		
	$inputName = strip_tags($inputName);
	$inputDescription = strip_tags($inputDescription);
	$inputKeywords = strip_tags($inputKeywords);
	$inputContent = strip_tags($inputContent);
	$inputIcon = strip_tags($inputIcon);
	$inputResource = strip_tags($inputResource);
	$inputLogin = strip_tags($inputLogin);
	$inputLogin = strip_tags($inputLogin);
				
		
	$Query = "INSERT INTO node ";
	$Query .= "(Parent, Creator, Name, Description, Keywords, Content, Icon, Resource, Created, LinkCount, DisplayOrder, LastChecked) "; 
	$Query .= "VALUES ( ";
	$Query .= "$pathway, ";
	$Query .= $UserInfo["ID"] . ", ";
	$Query .= "'" . addslashes($inputName) . "', ";
	$Query .= "'" . addslashes($inputDescription) . "', ";
	$Query .= "'" . addslashes($inputKeywords) . "', ";
	$Query .= addslashes($inputContent) . ", ";
	$Query .= "'" . addslashes($inputIcon) . "', ";
	$Query .= "'" . addslashes($inputResource) . "', ";
	$Query .= "now(), ";
	$Query .= "0, ";
	$Query .= addslashes($inputDisplayOrder) . ", ";
	$Query .= "'1970-02-18')"; //check new links right away
	$DatabaseResult = mysql_query($Query, $DatabaseLink);
	if(!$DatabaseResult)
	{
		$ActionResults .= "Add failed: " . mysql_error();
	}
	else
	{
		$newnode = mysql_insert_id($DatabaseLink);
		
		$Query = "INSERT INTO vote_option ";
		$Query .= "(ID, Node, Opt) ";
		$Query .= "VALUES ";
		
		for ($counter = 1; $counter <= MAX_VOTE_OPTIONS; $counter++)
		{
			if ($inputOption[$counter] != "")
			{
				// escape single quotes and remove any HTML tags before forming query
	
				$inputOption[$counter] = strip_tags($inputOption[$counter]);
				$inputOption[$counter] = addslashes($inputOption[$counter]);
	
				$Query .= "(NULL, $newnode, '$inputOption[$counter]'), ";
			}
		}
		
		$Query = substr($Query,0,-2);
		
		$DatabaseResult = mysql_query($Query, $DatabaseLink);
		
		if(!$DatabaseResult)
		{
			$ActionResults .= "Add failed: " . mysql_error();
		}
		else
		{
			$ActionResults .= "Node Added!";
		}
	}
	
	$newnode = mysql_insert_id();

	/* 
	** send mail to the list 
	*/
	if($inputSendMail == "")
	{
		$ActionResults .= "<BR>\n";
		$ActionResults .= "Mail: ";			
	
		$Query = "SELECT Private ";
		$Query .= "FROM pathway ";
		$Query .= "WHERE ID=$pathway ";
		$DatabaseResult = mysql_query($Query, $DatabaseLink);
		$DatabaseRow = mysql_fetch_row($DatabaseResult);
		$isPrivate = $DatabaseRow[0];

		$MailBody .= "PATHWAY\n   $pathway_PlainName\n";
		$MailBody .= "   <http://www.leonatkinson.com/brain/index.php3?SCREEN=view&pathway=$pathway>\n\n";
		$MailBody .= "NODE\n   $inputTitle <http://www.leonatkinson.com/brain/location.php3?inputNode=$newnode>\n\n";
		$MailBody .= "DESCRIPTION\n   $inputDescription\n\n";

		if($isPrivate == "N")
		{
			$MailTo = "brain@onelist.com";
			$MailFrom = "leon@leonatkinson.com";
			$MailSubject = "$inputTitle";

/*
			if(mail($MailTo, $MailSubject, $MailBody, "From: $MailFrom"))
			{
				$ActionResults .= "Sent!";
			}
			else
			{
				$ActionResults .= "Failed!";
			}
*/			
		}
		else
		{
			$ActionResults .= "Private!";
		}
	}


?>