--- MPIWGWeb/MPIWGStaff.py	2005/11/24 19:14:18	1.10.2.19
+++ MPIWGWeb/MPIWGStaff.py	2005/12/22 20:33:45	1.10.2.21
@@ -95,10 +95,16 @@ class MPIWGStaff(CatalogAware,ZSQLExtend
          
         self.ZSQLQuery("SET DATESTYLE TO 'German'")
 
-        self.ZSQLChange(_table="personal_www",_identify="id=%s"%DBid,publish_the_data=publish_the_data,
+	test=self.ZSQLQuery("select id from personal_www where id='%s' "%DBid)
+
+	
+	if test and (len(test)>0): #dataset exists
+	        self.ZSQLChange(_table="personal_www",_identify="id=%s"%DBid,publish_the_data=publish_the_data,
                                    date_from=date_from,
                                    date_to=date_to,stay_at_mpiwg=stay_at_mpiwg,position=position)
-                  
+		return True
+        else:
+	       return False
           
     def getPublicationSelectionMode(self):
         """get publication selection mode, default 'priority'"""
@@ -318,9 +324,9 @@ class MPIWGStaff(CatalogAware,ZSQLExtend
              pt=PageTemplateFile(os.path.join(package_home(globals()),'zpt','editCV.zpt')).__of__(self)
              return pt()
         
-         query="UPDATE personal_www SET cv ='%s' WHERE oid='%s'"
-
-         self.ZSQLQuery(query%(cv,oid))
+         query="UPDATE personal_www SET cv =%s WHERE oid='%s'"
+         
+         self.ZSQLQuery(query%(self.ZSQLQuote(cv),oid))
         
          if RESPONSE:
             RESPONSE.redirect("editCV")
@@ -333,9 +339,9 @@ class MPIWGStaff(CatalogAware,ZSQLExtend
              pt=PageTemplateFile(os.path.join(package_home(globals()),'zpt','editAwards.zpt')).__of__(self)
              return pt()
         
-         query="UPDATE personal_www SET awards ='%s' WHERE oid='%s'"
+         query="UPDATE personal_www SET awards =%s WHERE oid='%s'"
       
-         self.ZSQLQuery(query%(awards,oid))
+         self.ZSQLQuery(query%(self.ZSQLQuote(awards),oid))
         
          if RESPONSE:
             RESPONSE.redirect("editAwards")