#!/usr/bin/perl 
#Set the line above this to your perl path. Usually fine as is
# or /usr/local/bin/perl  /sbin/perl
# make certain that the first line stays the first line!
################################################################## 
#  (C)2000 Kemford LLC  
#  This software is FREEWARE! Do with it as you wish. It is yours   
#  to share and enjoy. Modify it, improve it, and have fun with it! 
#  It is distributed strictly as a learning aid and Kemford LLC 
#  disclaims all warranties including but not limited to:          
#  fitness for a particular purpose, merchantability, loss of       
#  business, harm to your system, etc... 
#  ALWAYS BACK UP YOUR SYSTEM BEFORE INSTALLING ANY 
#  SCRIPT OR PROGRAM FROM ANY SOURCE! 
###############################################
#  Script Configuration                           
###############################################
# Modify each item below to meet your needs.
#HTML file template for Guest Book:
$template="./template.html";
sub process_template {

	open(F,$template) or die ("\ncant open $template");
	$_o=$/;
	undef $/;
	$file_all=<F>;
	$/=$_o;
	close F;

#$referer = $cookie;
#$referer=~/1001site_referer=([^;\s]+).*/;
#$referer = $1;

if(length($referer)==0) {
		$referer = $ENV{'HTTP_REFERER'};
            $referer = substr ($referer,0,rindex ($referer,"/"));
#            print ("Set-Cookie: 1001site_referer=$referer\n");
            }

	$file_all=~s/<!--\s*&\s*exec\s*=\s*"?bbs"?\s*-->/$out/s;
	printit ("src=\"");
	printit ("src =\"");
	printit ("src = \"");
	printit ("src= \"");
	printit ("src='");
	printit ("src ='");
	printit ("src = '");
	printit ("src= '");
	printit ("SRC='");
	printit ("SRC ='");
	printit ("SRC = '");
	printit ("SRC= '");
	printit ("SRC=\"");
	printit ("SRC =\"");
	printit ("SRC = \"");
	printit ("SRC= \"");
	printit ("background=\"");
	printit ("background =\"");
	printit ("background = \"");
	printit ("background =\"");
	printit ("BACKGROUND=\"");
	printit ("BACKGROUND =\"");
	printit ("BACKGROUND = \"");
	printit ("BACKGROUND= \"");
	printit ("href=\"");
	printit ("href =\"");
	printit ("href = \"");
	printit ("href= \"");
	printit ("HREF=\"");
	printit ("HREF =\"");
	printit ("HREF = \"");
	printit ("HREF= \"");
	printit ("HREF= \"");
	printit ("HREF=\\\"");
	print "\n".$file_all;
	}
sub printit {
      $n=1;
	my $str = shift;
	while ($n>0) {
            $n = index ($file_all,$str,$n);
            if ($n>0) {
	            $teststr = substr ($file_all,$n+length($str),7);
	            $teststr2 = substr ($file_all,$n+length($str),6);
	            $teststr3 = substr ($file_all,$n+length($str),10);
	            if (!(($teststr2 eq "ftp://")||($teststr3 eq "javscript:")||($teststr eq "http://")||($teststr eq "mailto:")))
      		      {substr ($file_all,$n+length($str),0,$referer."/");$n+=length($referer."/");}
                        else {$n+=length($str);}
      		}
           	}
      }

#Save messages into file: 
$bbs_file="guestbook.txt";

#Administrator contact e-mail address:
$admin_email="frank_suess\@bfi-consulting.com";

#Admin password:
$admin_passwd="";

#Set to 1 to activate debug info
$DEBUG = 0;

#Script name
$s_name = $ENV{'SCRIPT_NAME'};

#Number of messages shown per screen:
$m_count=10;
$title="<h2>Guest Book</H2>";

#Color settings: Nick name,date,text,admin messages and other
$g_n="id=\"guest_nick\"";
$g_d="id=\"guest_data\"";
$g_t="id=\"guest_text\"";
$g_a="id=\"guest_adm\"";
$g_o="id=\"guest_all\"";

###############################################
#  Start reading data      										#
###############################################
  if ($ENV{'REQUEST_METHOD'} eq "GET")
    {$in = $ENV{'QUERY_STRING'};}
  elsif ($ENV{'REQUEST_METHOD'} eq "POST")
    {read(STDIN,$in,$ENV{'CONTENT_LENGTH'});}
  @in = split(/&/,$in);
  foreach $i (0 .. $#in) {
    $in[$i] =~ s/\+/ /g;
    ($key, $val) = split(/=/,$in[$i],2);
    $key =~ s/%([\dA-Fa-f][\dA-Fa-f])/pack("c",hex($1))/ge;
    $val =~ s/%([\dA-Fa-f][\dA-Fa-f])/pack("c",hex($1))/ge;
    $in{$key} .= "\0" if (defined($in{$key})); # \0 is the multiple separator
    $in{$key} .= $val;
    }
###############################################
#  Finish reading data                        #
###############################################


#$ENV{'HTTP_REFERER'}=$in{'ht_ref'} if(defined $in{'ht_ref'});  
#$ENV{'HTTP_REFERER'}=~m|(.+/)[^/]*|;  
#$in{'ht_ref'}=$1 unless (defined $in{'ht_ref'});
###############################################
#  Print header without cookies               #
###############################################
print "Content-type:text/html\n";

$header_ok=1;
###############################################
#  Check cookies and set it if it's nessesary #
###############################################

$cookie=$ENV{'HTTP_COOKIE'};
$cookie=~ s/%([\dA-Fa-f][\dA-Fa-f])/pack ("C", hex ($1))/eg;
$reg=0;
$reg=1 if($cookie=~/bbs_p=([^;\s]+).*/ and $1 eq $admin_passwd);

if($cookie=~/main_path=([^;\s]+).*/){
	$ENV{'HTTP_REFERER'}=$1;
	}else{print "Set-Cookie: main_path=$ENV{'HTTP_REFERER'}\n";
	}
$out.="($1)"if($DEBUG);

if($in{'a_email'} eq $admin_email and $in{'passwd'} eq $admin_passwd){
	print "Set-Cookie: bbs_p=$in{'passwd'}\n";
	$reg=1;
	}
$out.="
<br>cook=($cookie)
<br>a_email=($in{'a_email'})
<br>must be=($admin_email)
<br>passwd=($in{'passwd'})
<br>musr be=($admin_passwd)
<br>reg=$reg
 " if($DEBUG);

print "\n";
$out.="<CENTER>".$title;
$out.="
<form method=POST action='$s_name#b'>
<input type=hidden name=action value=add>
<font $g_o><TABLE CELLPADDING=5 CELLSPACING=0 BORDER=0><TR><TD>Email:</TD><TD ALIGN=RIGHT><input type=text CLASS=text name=mail size=10 value=></TD></TR>
<TR><TD>ICQ UIN:</TD><TD ALIGN=RIGHT><input type=text CLASS=text name=uin size=10 value=></TD></TR>
<!--Prefed color: <input type=text name=color size=10 value=000000><br>-->
<TR><TD>Your Nickname:</TD><TD ALIGN=RIGHT><input CLASS=text type=text name=nick size=10></TD></TR>
</TABLE>

<br>Leave your message here:<br>
<textarea rows=8 cols=35 name=text>
Hi to all! :)
</textarea>
<br><input type=submit value=Write CLASS=buttons>
<input type=reset value=Clear CLASS=buttons>
</font>
</form>
";



$file=$bbs_file;
&error("Can't find file $file") if(!-e $file);
&error("Can't read file $file") if(!-r $file);
&error("Can't write file $file") if(!-r $file);
&error("$file it's a directory") if(-d $file);

###############################################
#  Case an action:                            #
###############################################
if ($in{'action'} eq 'add')
###############################################
#  add                                        #
###############################################
	{
	open (F, "<$file.last");
	@s_f=stat "$file.last";
	read (F,$tmp,$s_f[7]);
	close F;
#	print "<$tmp><$in{'text'}>";
	goto out1 if($tmp eq $in{'text'});
	open (F, ">$file.last")||&error("Can't write file $file.last: $!");
	print F $in{'text'};
	close F;

        open (F, ">>$file")||&error("Can't append file $file: $!");
        $out.= "<h2 align=center>Your message added</h2><br>\n";
        print F "\n<!--NEW-->\n";
        $in{'text'}=~s/</&lt;/g;
        $in{'text'}=~s/>/&gt;/g;
	$in{'text'}=~s/\n/<br>/g;
	$in{'text'}=~s/\10/ /ge;
        print F "$nick ";
	print F 'say:';
        print F "\n".(localtime)."\n$in{'uin'}\n$in{'mail'}\n";
#	print F "<font color=$in{'color'}>";
        print F "<font $g_t>";
	print F $in{'text'};
	print F "</font>";
        print F "<!--$ENV{'REMOTE_ADDR'}-->\n";
        close F;
out1: {;}
	}
###############################################
#  Kill message                               #
###############################################
elsif (defined $in{'kill'}){
if(!($reg)){
	$out.= "<h2 align=center>You are not allowed to make this</h2>";
	goto out3;
	}
$out.="<h1 align=center>Remove message with id=$in{'kill'}</h1>";
open (F, "<$file")||&error("Can't read file $file: $!");
$to=0;
while (!eof F){
	$del[$to]="";
	while(!($t=~/<!--NEW-->/)){$t=<F>;goto out4 if(eof F);}
	$t=<F>;
	$del[$to].= $t;
	$t=<F>;
	$del[$to].= $t;
	$t=<F>;
	$del[$to].= $t;
	$t=<F>;
	$del[$to].= $t;
	$t=<F>;
	$del[$to].= $t;
	$to++;
	}
out4:{;}
close F;
$out.= "<table align=center><tr><td><font $g_o>Content of message:</font><br><pre>".$del[$in{'kill'}]."</pre></td></tr></table>\n";
open (F, ">$file")||&error("Can't write file $file: $!");
for($i=0;$i<$to;$i++)
	{print F "\n<!--NEW-->\n$del[$i]" if($i!=$in{'kill'});}
close F;

}
###############################################
#  Answer message 1                           #
###############################################
elsif (defined $in{'answer'}){
if(!($reg)){
	$out.= "<h2 align=center>You are not allowed to make this</h2>";
	goto out3;
	}
$out.= "<h1 align=center>Your answer to message $in{'answer'}</h1>";
$out.= "
<table align =center width=80%><tr><td align=center>
<form method=POST action='$s_name'>
<input type=hidden name=action value=answer>
<input type=hidden name=id value=$in{'answer'}>


<br><b><font $g_o>Put here text of your answer: </font></b>
<textarea rows=5 cols=40 name=text></textarea>
<br><input type=submit value=Send><input type=reset value=Clear>
</form>
</td></tr></table>;
";
}
###############################################
#  Answer message 2                           #
###############################################
elsif ($in{'action'} eq 'answer'){
if(!($reg)){
	$out.= "<h2 align=center>You are not allowed to make this</h2>";
	goto out3;
	}
$out.= "<h1 align=center>Writed yor answer</h1>";
open (F, "<$file")||&error("Can't read file $file: $!");
$to=0;
while (!eof F){
	$add[$to]="";
	while(!($t=~/<!--NEW-->/)){$t=<F>;goto out4 if(eof F);}
	$t=<F>;
	$add[$to].= $t;
	$t=<F>;
	$add[$to].= $t;
	$t=<F>;
	$add[$to].= $t;
	$t=<F>;
	$add[$to].= $t;
	$t=<F>;
	$add[$to].= $t;
	$to++;
	}
out4:{;}
close F;
$out.= "<table align=center><tr><td><font $g_o>Content of message: </font><br><pre>".$add[$in{'id'}]."</pre></td></tr></table>\n";
open (F, ">$file")||&error("Can't write file $file: $!");
chop $add[$in{'id'}];
chomp $add[$in{'id'}];
$in{'text'}=~s/\n/<br>/g;
$add[$in{'id'}].="<br><font $g_a>From administrator: </font><br><font $g_a><b>$in{'text'}</b></font>\n";
for($i=0;$i<$to;$i++)
	{print F "\n<!--NEW-->\n$add[$i]";}
close F;




}
###############################################
#  Answer message 2                           #
###############################################
elsif ($in{'action'} eq 'a_enter'){
$out.= "
<form action=\"$s_name\">
<h1>Please enter the email and password of admin</h1>
<font $g_o>
<br>email:<input type=text name=a_email size=10>
<br>password:<input type=text name=passwd size=10>
</font>
<br><input type=submit value=Enter>
<input type=reset value=Clear>
</form>
";


}
else
###############################################
#  Wrong action!!!                            #
###############################################
	{
#	&error("<h2>Warning!!!</h2> <font $g_o>Script was called with wrong action</font>");
	}

out3:{;}
###############################################
#  Show all messages                          #
###############################################
open (F, "<$file")||&error("Не могу прочитать файл $file: $!");
$to=0;
while (!eof F){
	$rez[$to]="";
	while(!($t=~/<!--NEW-->/)){$t=<F>;goto out2 if(eof F);}
	$rez[$to].= "\n\n<br><br><table align=center border=1 cellspacing=0 cellpadding=2 width=80%>\n<tr><td width=30%>\n";
	$t=<F>;
	$rez[$to].= "<font $g_n face=arial><b>$t</b></font> \n";
	$rez[$to].= "</td><td width=40% align=center>";
	$t=<F>;
	$rez[$to].= "<font $g_d face=courier size=2><b>$t</b></font> \n";
	$rez[$to].= "</td><td align=right width=30%>";
	$t=<F>;
	chomp $t;
	$rez[$to].= "<a href='http://wwp.icq.com/scripts/search.dll?to=$t'><font size=2 $g_o face=arial><b>$t</b></font></a>\n &nbsp;" if($t>1000);
	$t=<F>;
        chomp $t;
	$rez[$to].= "<a href='mailto:$t'><font $g_o face=arial size=2><b>MAIL ME</b></font></a> \n" if($t=~/@/);
	$rez[$to].= "<br><b>[id mesage=$to: <a href='$s_name?kill=$to'>Kill</a> <a href='$s_name?answer=$to'>Answer</a>]</b>" if($reg);
	$rez[$to].= "</td></tr><tr><td colspan=3>\n";
	$t=<F>;
	$rez[$to].="$t \n</td></tr>\n</table>\n";
	$to++;
	}
out2:{;}
$out.= "\n<table align =center width=80%><tr><td align=center><hr><b><font $g_o>Pages: ";
for($i=0;$i<$to;$i++){
	if(($i%$m_count)==0)
		{
		if($i!=$in{'show'}||!defined $in{'show'})
			{
			$out.= "<a href='$s_name?show=$i'>$i</a> " ;}
                        else {$out.= "$i " ;}
                }
        }
$out.= " last $m_count</font>" if(!defined $in{'show'});
$out.= "</b><hr></td></tr></table>\n";

if(!defined $in{'show'}){
	for($i=$to-$m_count<0?0:$to-$m_count;$i<$to;$i++)
		{$out.= "\n<!--NEW-->\n$rez[$i]\n";}
	}else{
        for($i=$in{'show'};$i<$in{'show'}+$m_count;$i++)
        	{$out.= "\n<!--NEW-->\n$rez[$i]\n";}
        }
close F;

$out.= "\n<table align=center width=80%><tr><td align=center><a href='$s_name#b' name=b><b><font $g_o face=arial size=4>refresh</font></b></a><hr><a href='$s_name?action=a_enter'><b><font $g_o face=arial size=2>Administration Access</font></b></a><!--hr><h3>That was last message</h3--></td></tr></table>";

###############################################
###############################################
#  Other functions                            #
###############################################
###############################################


###############################################
#  Error                                      #
###############################################
sub error{
print "Content-type:text/html\n\n" if(!$header_ok);
if(!$_[1]){print " 
<!--Error message-->
<center>
<h1>Error!!!</h1>
<hr>
<b><pre>@_</pre></b>
<hr>
Please, inform wwwadmin by the email: <a href='mailto:$admin_email'>$admin_email</a>
<br>
We are sorry for mistake
</center>
<!--End error message-->";}
else {
	open (F,$_[1])||&error("Can't open $_[1]: $!");
	my(@F);@F=<F>;
	close F;
	print @F;
	
	}
exit (1);
}


###############################################
#  Show Template                              #
###############################################

open(F,$template) or &error("Can't open template: $!");
$_o=$/;
undef $/;
$file_all=<F>;
$/=$_o;
close F;
$out.="</CENTER>";

$file_all=~s/<!--\s*&\s*exec\s*=\s*"?bbs"?\s*-->/$out/s;
#<!--&exec="bbs"-->

#$ENV{'HTTP_REFERER'}=$in{'ht_ref'} if(defined $in{'ht_ref'});  
#$ENV{'HTTP_REFERER'}=~m|(.+/)[^/]*|;
#$t=$1;
#$file_all=~s/\/\*base//igm;
#$file_all=~s/base\*\///igm;
#$file_all=~s/#base/$t/igm;
#$file_all=~s/(<body[^>]*>)/$1\n<base href=\"$t\">/igm;
#$file_all=~s/(<body[^>]*background\s*=\s*['"]?)([^"' >]*)(['"]?[^>]*>)/"$1".((index($2,'\/')==0 or -1!=index($2,':\/\/'))?$2:$t.$2)."$3"/igme;
#$file_all=~s/(<form[^>]*>)/$1\n<input type=hidden name='ht_ref' value='$t'>/igm;
#$file_all=~s/(<link[^>]*href\s*=\s*['"]?)([^>]*>)/$1$t$2/igm;                 
#$file_all=~s/(<link[^>]*)($t)mailto/$1mailto/igm;
#$file_all=~s/(\.src\s*=\s*['"])/$1$t/igm;

#print $file_all;
&process_template;


sub MethGet {
  return ($ENV{'REQUEST_METHOD'} eq "GET");
}
###############################################
#  End Script                                 #
###############################################
__END__