<?php
/******************************************************************************
*
*    Open ShareLive (main site code)
*    Copyright (C) 2002-2005  ShareLive
*
*    This program is free software; you can redistribute it and/or
*    modify it under the terms of the GNU General Public License
*    as published by the Free Software Foundation; either version 2
*    of the License, or (at your option) any later version.
*
*    This program is distributed in the hope that it will be useful,
*    but WITHOUT ANY WARRANTY; without even the implied warranty of
*    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
*    GNU General Public License for more details.
*
*    You should have received a copy of the GNU General Public License
*    along with this program; if not, write to the Free Software
*    Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
*
******************************************************************************/

	require('Connections/Default.php');
	require('backend/usermgr_functions.php');
	require('backend/date_functions.php');
	require('errmsg.php');

	QuickCheck();

	if (!$is_admin)
		ShowError("Cannot add news item if you are not an administrator.", "Access Denied");

	$msg = $_POST[message];
	$title = strip_tags(htmlspecialchars($_POST[title]));
	$msg = str_replace("\r\n", "<br>", $msg);

	if (!$msg || !$title)
		ShowError("Missing one or more fields. Please make sure you fill in ALL the fields.", "Error Adding News");

	mysql_query("INSERT INTO ".$dbprefix."news (title, date, bodyhtml, username) VALUES ('$title', '" . GetMySQLDate() . "', '$msg', '$username')");
	header("Location: index.php");

?>