<?php 
require 'check_login.php';
if ($logged_in <> 1) {
	header('Location: login.php');
	return;
}
else
{
require("configure.php");

$pid			= $_POST["pid"];
$title_en		= htmlspecialchars($_POST["title_en"],ENT_QUOTES);
$title_tc		= htmlspecialchars($_POST["title_tc"],ENT_QUOTES);
$levelnum		= $_POST["levelnum"];
$Sort			= $_POST["sort"];
$desc_en		= preg_replace("/'/","\'",$_POST["desc_en"]);
$desc_tc		= preg_replace("/'/","\'",$_POST["desc_tc"]);

//print_r($_POST); 

$sql = "select max(clinic_specid) as maxid from clinic_spec ";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$clinic_specid = $row{maxid}+1;


if ($Sort == '' || $Sort == '0') {
	$sql = "select max(sort) as maxid from clinic_spec WHERE parentid=".$pid." ";
	$result=mysql_query($sql);
	$row = mysql_fetch_array($result,MYSQL_ASSOC);
	$Sort = $row{maxid}+1;
}
if( mysql_num_rows(mysql_query("SELECT clinic_specid FROM clinic_spec WHERE parentid=".$pid." AND sort=$Sort ")) > 0){
	mysql_query("UPDATE clinic_spec SET sort= Sort+1 WHERE parentid=".$pid." AND sort >=$Sort ");
}

$sql = "insert into clinic_spec (clinic_specid, parentid, levelnum, title_en, title_tc, desc_en, desc_tc, sort) 
		values ('$clinic_specid', '$pid', '$levelnum', '$title_en', '$title_tc', '$desc_en', '$desc_tc', '$Sort')";
mysql_query($sql);
if( mysql_errno() > 0 ){
	echo 'Add Clinic Specialities Error:<br />'. mysql_error() .'<br />SQL: '. $sql;
	exit;
}

mysql_close($dbh);

header("Location: clinic_spec_index.php?pid=$pid&msg=Add Successful");
}
?>