#!/usr/bin/perl

#################################################################################################
#COBRA version 1.0, copyright 2000 by Michael K. Goode.
#based on the guestbook script by bernard sowa : www.zonecoaster.com
#
#Copyright 2000 by Michael K. Goode#
#Version Finish Date: 10 October 2000
#This script is free for use, distribution, and modification#
#The only right I reserve is this header must remain intact, as long as the program#
#is used for its original purpose (appending comments to a webpage).#
#This header may be removed, if, and only if, a portion of the code is used in a program that does not#
#fulfill the functions of this program#
#The home of this script: http://www.mikegoode.com/web/scripts/#
#please check there for any updates or upgrades or bug fixes and for help files#
#my email address: mike@mikegoode.com#
#if you have any good changes or additions, please email them to me,#
#and I will add them to this program or add new versions of the program#
#to my website and credit you.#
##
#I am not responsible for any damage resulting from the use of this program#
#and I make no guarentees about its performance, specific or implied#
#I am also not able to help anyone with support, other than #
#by providing some basic help info on my website.#
#############################################################
#          YOU CAN CHANGE  ANYTHING BELOW THIS POINT TO YOUR HEART'S CONTENT#
#############################################################
######################################################################


###########################
#  You must insert this line of html in your page right before you want the comments to appear:
#    <!--Do not change or get rid of this line-->
#It is, however, included in the html form template, before the actual form
#################################################################################################
#Configuration Section
#
#$basedir
#The base directory onto which all user directories are appended.
#Example:
#Two typical users, jdoe and eodj have the following home directories(respectively)
#/root/users/jdoe
#/root/users/eodj
#$basedir would be:  $basedir='/root/users';
#
#If you're setting it up for your own personal use, set this to your home directory.  If you
#have a public_html directory, include public_html in $basedir
#
#No trailing slash!
#
#$baseurl
#The URL for the $basedir.  No trailing slash!
#
#
#
#@required
#Array containing a list of all of the fields that must be present in a form and which
#must be filled in by a person signing the guestbook in order for the entry to be
#added to the guestbook(required inputs from your form...<input type=text name="whatever">)
#################################################################################################
#the page that the comments will be added to is sent to the program in the form as a hidden input
#see the html form template -- that hidden input must be changed to the relative position of the
#page being appended each time the form is appended to a page.
#
#Also, before this program will work, it is necessary to chmod the program to world executable,
#and to chmod the page that will have comments added to world writeable.
#
#In the form is another hidden input called 'bulleturl'; this is the location of the bullet .gif file
#on your server. The bullet is printed at the left of the first line of each comment.
#If you wish, you may set 'bulleturl' to '', and the program will not print anything
#

$basedir='/data/domains/mikegoode.com/public_html';
$baseurl='http://www.mikegoode.com';
@required=('realname','email');

#You do not need to change anything below this point.

#################################################################################################
#Get Form Data
#################################################################################################



&get_form_data;

foreach $rfield (@required)		#Check if required fields are filled out. If not, quit.
{
	if($formdata{$rfield} eq "")
	{
		++$bad;
	}
}
if($bad != "0")		#if one or more of the required fields isn't filled in
{
	print "Content-type: text/html\n\n";
	print "<html>\n<title>Error</title>\n";
	print "<body bgcolor=\"\#ffffff\" text=\"\#000000\">\n\n";
	print "<p>At least one of the required fields was left blank or your email address was not accepted.\n";
	print "<p>The required inputs are:\n<p>\n";
	print "<ul>\n";
	foreach $rfield (@required)
	{
		print "<li><b>$rfield</b>\n";
	}
	print "<p>Please press your browser's \"Back\" button and try again.\n";
	print "</ul>\n<center><hr width=50%></center>\n</html>";
	exit 0;
}

#################################################################################################
#Do stuff with it...ie. open the user's guestbook file and add the new entry to the top
#################################################################################################

$page=$formdata{'page'}; #find out name of user's guestbook
$pagename="$page";
$page="$basedir/$page";

open(PAGE, "$page") || print "Content-type: text/html\n\n Could not open $page";
@contents=<PAGE>;#get contents of Guestbook so you can add this entry to it.
close(PAGE);

open(PAGE2, ">$page");
foreach $line (@contents)
{
	if($line =~ /<!--Do not change or get rid of this line-->/)#print new entry after this line
	{
		print PAGE2 "$line\n\n";
		print PAGE2 "<\!\-\-Begin Entry\-\->\n";
		print PAGE2 "<p>\n<br>\n";
		print PAGE2 "<b>$formdata{'message'}</b>\-\-\- From <b>$formdata{'realname'}</b>\n<br>\n";
		print PAGE2 "<font size=-2>[<a href=\"mailto:$formdata{'email'}\">Mail Me</a>";
		&get_date;
		$nicedate="$nicedate";
		if ($formdata{'homepage'} ne "")
		{
			print PAGE2 " \| <a href=\"$formdata{'homepage'}\">Visit My Homepage</a>][$nicedate]\n<br>\n";
		}
		else
		{
			print PAGE2 "][$nicedate]\n<br>\n\n";
		}
		
		#now print each of the input names and the user's input if it isn't empty
		#then print the comments last.
		
		print PAGE2 "</font>\n<ul>\n";
		
		$leaveout='/logon/bulleturl/comments/email/message/realname/page/homepage/';
		
		foreach $key (keys(%formdata))
		{
			if($leaveout !~ /\/$key\//)
			{
				print PAGE2 "<li><b>$key</b>: $formdata{$key}\n";
			}
		}
		print PAGE2 "<li>\n";
		print PAGE2 "$formdata{'comments'}\n\n\n</ul>\n";
		print PAGE2 "\n<p>\n<hr>\n<p><br>\n\n";
		print PAGE2 "<\!\-\-End Entry\-\->\n";
	}
	else
	{
		print PAGE2 $line;
	}
}
close(PAGE2);

print "Content-type: text/html\n\n";
print "<html>\n<title>Thank you</title>\n";
print "<body bgcolor=\"\#ffffff\" text=\"\#000000\">\n\n";
print "Thank you for adding your comment.  You can click ";
print "<a href=\"$baseurl/$pagename\">here</a> to see it.";
print "<br>You may need to reload it to get an updated version which includes your entry.";
print "</html>";
exit;

#################################################################################################
#Subroutines
#################################################################################################

sub get_form_data {

	$buffer = "";
	read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});
	@pairs=split(/&/,$buffer);
	foreach $pair (@pairs)
	{
		@a = split(/=/,$pair);
		$name=$a[0];
		$value=$a[1];
		$name =~ s/\+/ /g;

		$deniedfile='/usr/local/www/bernard/denied.txt';
		if($value=~/<SCRIPT/i)
		{
			open(DENY,">>$deniedfile");
			print DENY "$ENV{'REMOTE_HOST'}\n";
			close(DENY);
		}

		$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
		$value =~ s/~!/ ~!/g;
		$value =~ s/\+/ /g;
		$value =~ s/<([^>])*>//g;
		$value =~ s/(\r)+/\-\-/g;
		$value =~ s/\n+//g;
		$value =~ s/(\-\-)+/<br>/g;
		$value=~s/\<SCRIPT//gi;
		$value=~s/\<\/SCRIPT\>//gi;
		$value=~s/\function \{//gi;
		push (@formdata,$name);
		push (@formdata,$value);
	}
	%formdata=@formdata;
	%formdata;
}

sub get_date {

	%days=('Sun','Sunday',
		'Mon','Monday',
		'Tue','Tuesday',
		'Wed','Wednesday',
		'Thu','Thursday',
		'Fri','Friday',
		'Sat','Saturday');

	%mos=('Jan','January',
		'Feb','February',
		'Mar','March',
		'Apr','April',
		'May','May',
		'Jun','June',
		'Jul','July',
		'Aug','August',
		'Sep','September',
		'Oct','October',
		'Nov','November',
		'Dec','December');
	$a = scalar localtime time;
	@a=split(/ /,$a);
	#############################################
	#@a looks like:
	#############################################
	#@a = ('wdy','mmm',' ','dd','HH:MM:SS','yy');
	#	 0     1    2    3       4       5
	#############################################
	foreach $key (keys(%days))
	{
		if($a[0] eq $key)
		{
			$a[0]=$days{$key};
		}
	}
	foreach $key (keys(%mos))
	{
		if($a[1] eq $key)
		{
			$a[1]=$mos{$key};
		}
	}
	if($a[2] eq "")
	{
		$a[2] = $a[3];
		$not = 1;
	}
	if($a[2] eq "1" | $a[2] eq "21" | $a[2] eq "31")
	{
		$a[2]="$a[2]st";
	}
	elsif($a[2] eq "2" | $a[2] eq "22")
	{
		$a[2]="$a[2]nd";
	}
	elsif($a[2] eq "3" | $a[2] eq "23")
	{
		$a[2]="$a[2]rd";
	}
	else
	{
		$a[2]="$a[2]th";
	}
	if($not)
	{
		$nicedate="$a[0] $a[1] $a[2], $a[5] at $a[4]";
	}
	else
	{
		$nicedate="$a[0] $a[1] $a[2], $a[4] at $a[3]";
	}
	return $nicedate;
}