<?
	/* 
	** if we have necessary fields, add pathway
	*/
	if(($inputName!="") && ($UserInfo["Edit"]))
	{
		// escape single quotes before forming query
	
		// strip HTML tags from user input to guard against hacking
		
		$inputName = strip_tags($inputName);
		$inputPrivacy = strip_tags($inputPrivacy);
		$inputDescription = strip_tags($inputDescription);
		$inputIcon = strip_tags($inputIcon);
		$inputLayout = strip_tags($inputLayout);
				
		$Query = "UPDATE pathway ";
		$Query .= "SET Name='" . addslashes($inputName) . "', ";
		$Query .= "Private='" . addslashes($inputPrivacy) . "', ";
		$Query .= "Description='" . addslashes($inputDescription) . "', ";
		$Query .= "Icon='" . addslashes($inputIcon) . "', ";
		$Query .= "Layout=$inputLayout ";
		$Query .= "WHERE ID=$inputPathway ";
		
		$DatabaseResult = mysql_query($Query, $DatabaseLink);
		if(!$DatabaseResult)
		{
			$ActionResults = "Update failed: " . mysql_error();
		}
		else
		{
			$ActionResults = "Pathway Updated!";
		}

		
	}

?>
