--- MPIWGWeb/MPIWGStaff.py	2005/11/22 17:58:27	1.10.2.18
+++ MPIWGWeb/MPIWGStaff.py	2005/12/22 20:33:45	1.10.2.21
@@ -95,10 +95,16 @@ class MPIWGStaff(CatalogAware,ZSQLExtend
          
         self.ZSQLQuery("SET DATESTYLE TO 'German'")
 
-        self.ZSQLChange(_table="personal_www",_identify="id=%s"%DBid,publish_the_data=publish_the_data,
+	test=self.ZSQLQuery("select id from personal_www where id='%s' "%DBid)
+
+	
+	if test and (len(test)>0): #dataset exists
+	        self.ZSQLChange(_table="personal_www",_identify="id=%s"%DBid,publish_the_data=publish_the_data,
                                    date_from=date_from,
                                    date_to=date_to,stay_at_mpiwg=stay_at_mpiwg,position=position)
-                  
+		return True
+        else:
+	       return False
           
     def getPublicationSelectionMode(self):
         """get publication selection mode, default 'priority'"""
@@ -314,13 +320,13 @@ class MPIWGStaff(CatalogAware,ZSQLExtend
     def editCV(self,cv=None,oid=None,RESPONSE=None):
          """edit Cv"""
 
-         if (not cv):
+         if (not oid):
              pt=PageTemplateFile(os.path.join(package_home(globals()),'zpt','editCV.zpt')).__of__(self)
              return pt()
         
-         query="UPDATE personal_www SET cv ='%s' WHERE oid='%s'"
-
-         self.ZSQLQuery(query%(cv,oid))
+         query="UPDATE personal_www SET cv =%s WHERE oid='%s'"
+         
+         self.ZSQLQuery(query%(self.ZSQLQuote(cv),oid))
         
          if RESPONSE:
             RESPONSE.redirect("editCV")
@@ -328,14 +334,14 @@ class MPIWGStaff(CatalogAware,ZSQLExtend
     security.declareProtected('View management screens','editAwards')    
     def editAwards(self,awards=None,oid=None,RESPONSE=None):
          """edit a awards"""
-
-         if (not awards):
+     
+         if (not oid):
              pt=PageTemplateFile(os.path.join(package_home(globals()),'zpt','editAwards.zpt')).__of__(self)
              return pt()
         
-         query="UPDATE personal_www SET awards ='%s' WHERE oid='%s'"
-
-         self.ZSQLQuery(query%(awards,oid))
+         query="UPDATE personal_www SET awards =%s WHERE oid='%s'"
+      
+         self.ZSQLQuery(query%(self.ZSQLQuote(awards),oid))
         
          if RESPONSE:
             RESPONSE.redirect("editAwards")