<!-- #include virtual="/includes/functions.asp" -->
<%
title = fixsql(request.form("title"))
URL = request.form("URL")
content = fixsql(request.form("content"))
sectionID = request.form("sectionID")
restricted = request.form("restricted")
if restricted <> "" then restricted = replace(restricted, ",", "|")

set objDB = OpenDatabase(false)

SQL = "Select MAX(DisplayOrder) as DisplayOrder from ContentSubsections where SectionID = '" & sectionID & "' AND Active = 1"
set rsOrder = CreateRecordset(objDB, SQL)

if not isnull(rsOrder("DisplayOrder")) then
	DisplayOrder = rsOrder("DisplayOrder") + 1
else
	DisplayOrder = 1
end if

rsOrder.close
set rsOrder = nothing

SQL = "Insert into ContentSubsections (SectionID, Name, URL, Content, Restricted,DisplayOrder) VALUES ('" & sectionID & "','" & title & "','" & URL & "','" & content & "','" & restricted & "'," & DisplayOrder & ")"
UpdateDB objDB, SQL

objDB.close
set objDB = nothing

response.redirect("../content.asp")
%>