<?
	/* 
	** if we have necessary fields, update node
	*/
	if(($inputName!="") AND ($UserInfo["Edit"]))
	{

		// strip HTML tags from user input to guard against hacking
		
		$inputName = strip_tags($inputName);
		$inputResource = strip_tags($inputResource);
		$inputDescription = strip_tags($inputDescription);
		$inputKeywords = strip_tags($inputKeywords);
		$inputContent = strip_tags($inputContent);
		$inputIcon = strip_tags($inputIcon);
		$inputDate = strip_tags($inputDate);
		$inputAuthor = strip_tags($inputAuthor);
		$inputBody = strip_tags($inputBody);
		
		
		
		$Query = "UPDATE node ";
		$Query .= "SET ";
		$Query .= "Name='" . addslashes($inputName) . "', ";
		$Query .= "Resource='" . addslashes($inputResource) . "', ";
		$Query .= "Description='" . addslashes($inputDescription) . "', ";
		$Query .= "Keywords='" . addslashes($inputKeywords) . "', ";
		$Query .= "Content=" . addslashes($inputContent) . ", ";
		$Query .= "Icon='" . addslashes($inputIcon) . "', ";
		$Query .= "DisplayOrder=$inputDisplayOrder ";
		$Query .= "WHERE ID = $inputNode ";
		$DatabaseResult = mysql_query($Query, $DatabaseLink);

		if(!$DatabaseResult)
		{
			$ActionResults .= "Add failed: " . mysql_error();
		}
		elseif ($inputContentName == "Story")
		{
			$inputDate = $inputDateYear . "-" . $inputDateMonth . "-" . $inputDateDay;
			
			$Query = "UPDATE story ";
			$Query .= "SET Author='" . addslashes($inputAuthor) . "', ";
			$Query .= "Date='" . addslashes($inputDate) . "', ";
			$Query .= "Icon='" . addslashes($inputIcon) . "', ";
			$Query .= "Body='" . addslashes($inputBody) . "' ";
			$Query .= "WHERE Node=$inputNode";
			
			$DatabaseResult = mysql_query($Query, $DatabaseLink);
		
			if(!$DatabaseResult)
			{
				$ActionResults .= "Add failed: " . mysql_error();
			}
			else
			{	
				$ActionResults = "Node Updated!<BR>\n";
			}
		}
		else
		{	
			$ActionResults = "Node Updated!<BR>\n";
		}

	}
?>
