#!/usr/bin/perl


$Password = "woods";
$BaseDir = "/InetPub/wwwroot/LostAcresResort/rates";
$BaseURL = "http://www.lostacresresort.com/rates";
$CGI_URL = "http://www.lostacresresort.com/rates/rates.cgi";
$DataFile = "rates.dta";
$allow_html = 1; # Set to 1 to allow html commands in the text

require '/InetPub/wwwroot/ResortWebOnline/cgi-bin/subroutines/specials.lib';

if ($ENV{'QUERY_STRING'} ne "") { # Parse the query string
	&UnWeb1;
	$Q = 1;
}
else {
	&UnWeb;
	$Q = 0;
}

if ($in{'action'} eq "add") { # Add a story

	header('Add Stories');
	body('#D2B48C');
	print "\n";
	print "<FORM method=post action=\"$CGI_URL\">\n";
	print "<input type=hidden name=\"action\" value=\"add2\">\n";
	$Filename = filename();
	print "<input type=hidden name=\"Filename\" value=\"$Filename\">\n";
	print "<P ALIGN=CENTER><IMG SRC=\"../admin/images/adding.gif\" WIDTH=\"160\" HEIGHT=\"36\" ALIGN=\"BOTTOM\"\n";
	print "NATURALSIZEFLAG=\"3\"></P>\n";
	print "\n";
	print "<P><FONT SIZE=-1>To add a new story to the system, enter your password,\n";
	print "the headline, the lead\n";
	print "paragraph (limited to 40 characters), and the body of the story. The headline and lead\n";
	print "paragraph will be shown to users in the list of all stories available.</FONT></P>\n";
	print "\n";
	print "<P><TABLE WIDTH=\"100%\" BORDER=\"0\" CELLSPACING=\"0\" CELLPADDING=\"0\">\n";
	print "<TR>\n";
	print "<TD VALIGN=\"TOP\"><P ALIGN=RIGHT><B><FONT SIZE=-1>Password:</FONT></B></TD>\n";
	print "<TD WIDTH=\"80%\"><INPUT NAME=\"Password\" TYPE=\"password\" SIZE=\"30\"></TD></TR>\n";
	print "</TR>\n";
	print "<TR>\n";
	print "<TD VALIGN=\"TOP\"><P ALIGN=RIGHT><B><FONT SIZE=-1>Headline:</FONT></B></TD>\n";
	print "<TD><INPUT NAME=\"Headline\" TYPE=\"text\" SIZE=\"50\"></TD></TR>\n";
	print "<TR>\n";
	print "<TD VALIGN=\"TOP\"><P ALIGN=RIGHT><B><FONT SIZE=-1>Lead Paragraph:</FONT></B></TD>\n";
	print "<TD><INPUT NAME=\"Lead\" TYPE=\"text\" SIZE=\"40\" MAXLENGTH=\"40\"></TD></TR>\n";
        print "<TR>\n";
	print "<TD VALIGN=\"TOP\"><P ALIGN=RIGHT><B><FONT SIZE=-1>Body of Story:</FONT></B></TD>\n";
	print "<TD><TEXTAREA NAME=\"Body\" WRAP=\"VIRTUAL\" ROWS=\"10\" COLS=\"50\"\n";
	print "></TEXTAREA></TD></TR>\n";
	print "</TABLE>\n";
	print "</P>\n";
	print "\n";
	print "<P ALIGN=CENTER><INPUT NAME=\"name\" TYPE=\"submit\" VALUE=\"Submit\">\n";
	print "<INPUT NAME=\"name\" TYPE=\"reset\" VALUE=\"Reset\"></P>\n";
	print "\n";
	print "</FORM>\n";
	footer();
}

if ($in{'action'} eq "add2") {
	# Check to see that all information was filled in
	if (($in{'Filename'} eq "") || ($in{'Headline'} eq "") || ($in{'Lead'} eq "") ||
		($in{'Body'} eq "") || ($in{'Password'} eq "")) { # Not all information was filled in
			&Error (Information_Incomplete);
	}
	
	unless ($in{'Password'} eq $Password) { # Password is incorrect
		&Error ("Password_Incorrect");
	}
	
	# Write the information to the file

	# Write the Headline, Lead Paragraph, and Body for future editing

	open (NEWFILE,">$BaseDir/$in{'Filename'}.head");
	print NEWFILE "$in{'Headline'}";
	close NEWFILE;

	open (NEWFILE,">$BaseDir/$in{'Filename'}.lead");
	print NEWFILE "$in{'Lead'}";
	close NEWFILE;

	open (NEWFILE,">$BaseDir/$in{'Filename'}.body");
	print NEWFILE "$in{'Body'}";
	close NEWFILE;

	# Expand the comments for html
 	$in{'Body'} =~ s/\n/<BR>\n/go;

	open (NEWFILE,">$BaseDir/$in{'Filename'}.html");
	$Header = head1($in{'Headline'});
	print NEWFILE "$Header";
	$date = date();
	print NEWFILE "<FONT SIZE=-2>Posted on: $date</FONT><p>\n";
	print NEWFILE "<b><center><h2>$in{'Headline'}</h2></center></b>\n";
	print NEWFILE "<h3>$in{'Lead'}</h3><p>\n";
	print NEWFILE "$in{'Body'}<p>\n";
	$Footer = foot1();
	print NEWFILE "$Footer";
	close NEWFILE;
	
	# Now update the index file for that directory.
	
    open(GW,">>$BaseDir/$DataFile");
	print GW "$in{'Headline'}\t$in{'Filename'}.html\t$in{'Lead'}\n";
    close GW;

	header('Stories Posted');
	body('#FFFFFF');
	hr();
	print "<center><h1>Stories Posted!</h1></center>\n";
	print "The stories entitled $in{'Headline'} has been posted to directory $BaseDir/$in{'Filename'}.<p>\n";
	footer();
	
}

if ($in{'action'} eq "delete") { # Delete a story

	# Read in the datafile
	
	open (DATA, "$BaseDir/$DataFile");
	@Data = <DATA>;
	close DATA;
	
	$Count = 0;
	foreach $Line (@Data) {
		@Temp = split (/\t/, $Line);
		$StoryLine[$Count] = "<OPTION value=\"$Temp[1]\">$Temp[0]\n";
		$Count++;
	}
	
	header('Delete Stories');
	body('#D2B48C');
	print "\n";
	print "<FORM method=post action=\"$CGI_URL\">\n";
	print "<input type=hidden name=\"action\" value=\"delete2\">\n";
	print "<P ALIGN=CENTER><IMG SRC=\"../admin/images/deleting.gif\" WIDTH=\"160\" HEIGHT=\"36\" ALIGN=\n";
	print "\"BOTTOM\" NATURALSIZEFLAG=\"3\"></P>\n";
	print "\n";
	print "<P><B><center><FONT SIZE=-1>To delete a story from the system, select the story\n";
	print "below and hit the delete button.</FONT></center></B></P>\n";
	print "\n";
	print "<P ALIGN=LEFT><TABLE WIDTH=\"80%\" BORDER=\"0\" CELLSPACING=\"0\" CELLPADDING=\n";
	print "\"0\">\n";
	print "<TR>\n";
	print "<TD WIDTH=\"30%\"><P ALIGN=RIGHT><B><FONT SIZE=-1>Please Enter Your Password:</FONT></B></TD>\n";
	print "<TD WIDTH=\"50%\"><P ALIGN=LEFT><INPUT NAME=\"Password\" TYPE=\"password\" SIZE=\"20\"></TD></TR>\n";
	print "<TR>\n";
	print "<TD WIDTH=\"70%\"><P ALIGN=RIGHT><B><FONT SIZE=-1>Choose the story to delete:</FONT></B></TD>\n";
	print "<TD><SELECT name=\"Filename\">\n";
	foreach $Story (@StoryLine) {
		print "$Story";
	}
	print "</SELECT></TD></TR>\n";
	print "</TABLE>\n";
	print "</P>\n";
	print "\n";
	print "<P ALIGN=CENTER><INPUT TYPE=\"submit\" VALUE=\"Delete\">\n";
	print "<INPUT NAME=\"name\" TYPE=\"reset\" VALUE=\"Reset\"></P>\n";
	print "\n";
	print "</FORM>\n";
	footer();
}

if ($in{'action'} eq "delete2") {

	if (($in{'Password'} eq "") || ($in{'Filename'} eq "")) {
		&Error ("Information_Incomplete");
	}
	
	unless ($in{'Password'} eq $Password) { # The password doesn't match
		&Error ("Password_Incorrect");
	}
	
	unlink ("$BaseDir/$in{'Filename'}");
	$fname = "$in{'Filename'}";
	@fname = split (/.html/ , $fname);
	unlink ("$BaseDir/$fname[0].head");
	unlink ("$BaseDir/$fname[0].lead");
	unlink ("$BaseDir/$fname[0].body");

	# Now update the index file for that directory.
	
	open(GW,"$BaseDir/$DataFile");
	@lines = <GW>;
	close GW;
	
	open (GB,">$BaseDir/$DataFile");
	foreach $line (@lines) {
		chop $line;
		@TempData = split (/\t/, $line);
		
		if ($TempData[1] ne "$in{'Filename'}") {
			print GB "$line\n";
		}
	}
	close GB;
	
	header('Story Deleted');
	body('#FFFFFF');
	hr();
	print "<center><h1>Story Deleted!</h1></center>\n";
	print "The file $in{'Filename'} has been deleted.<p>\n";
	footer();
	
}

if ($in{'action'} eq "change") { # Change a story

	# Read in the datafile
	
	open (DATA, "$BaseDir/$DataFile");
	@Data = <DATA>;
	close DATA;
	
	$Count = 0;
	foreach $Line (@Data) {
		@Temp = split (/\t/, $Line);
		$StoryLine[$Count] = "<OPTION value=\"$Temp[1]\">$Temp[0]\n";
		$Count++;
	}
	
	header('Change Stories');
	body('#D2B48C');
	print "\n";
	print "<FORM method=post action=\"$CGI_URL\">\n";
	print "<input type=hidden name=\"action\" value=\"change2\">\n";
	print "<P ALIGN=CENTER><IMG SRC=\"../admin/images/changing.gif\" WIDTH=\"160\" HEIGHT=\"36\" ALIGN=\n";
	print "\"BOTTOM\" NATURALSIZEFLAG=\"3\"></P>\n";
	print "\n";
	print "<P><B><center><FONT SIZE=-1>To change a story from the system, select the story\n";
	print "below and hit the change button.</FONT></center></B></P>\n";
	print "\n";
	print "<P ALIGN=LEFT><TABLE WIDTH=\"80%\" BORDER=\"0\" CELLSPACING=\"0\" CELLPADDING=\n";
	print "\"0\">\n";
	print "<TR>\n";
	print "<TD WIDTH=\"30%\"><P ALIGN=RIGHT><B><FONT SIZE=-1>Please Enter Your Password:</FONT></B></TD>\n";
	print "<TD WIDTH=\"50%\"><P ALIGN=LEFT><INPUT NAME=\"Password\" TYPE=\"password\" SIZE=\"20\"></TD></TR>\n";
	print "<TR>\n";
	print "<TD WIDTH=\"70%\"><P ALIGN=RIGHT><B><FONT SIZE=-1>Choose the story to change:</FONT></B></TD>\n";
	print "<TD><SELECT name=\"Filename\">\n";
	foreach $Story (@StoryLine) {
		print "$Story";
	}
	print "</SELECT></TD></TR>\n";
	print "</TABLE>\n";
	print "</P>\n";
	print "\n";
	print "<P ALIGN=CENTER><INPUT TYPE=\"submit\" VALUE=\"Submit\">\n";
	print "<INPUT NAME=\"name\" TYPE=\"reset\" VALUE=\"Reset\"></P>\n";
	print "\n";
	print "</FORM>\n";
	footer();
}

if ($in{'action'} eq "change2") { # Change a story

	$fname = "$in{'Filename'}";
	@fname = split (/.html/ , $fname);
	open (HEAD, "$BaseDir/$fname[0].head");
	@Head = <HEAD>;
	close HEAD;
	open (LEAD, "$BaseDir/$fname[0].lead");
	@Lead = <LEAD>;
	close LEAD;
	open (BODY, "$BaseDir/$fname[0].body");
	@Body = <BODY>;
	close BODY;

	foreach (@Body) {
		$_ =~ s/\n//go;
		$alpha = $alpha . $_;
	}

	header('Change Stories');
	body('#D2B48C');
	print "\n";
	print "<FORM method=post action=\"$CGI_URL\">\n";
	print "<input type=hidden name=\"action\" value=\"change3\">\n";
	print "<input type=hidden name=\"Filename\" value=\"$fname\">\n";
	print "<input type=hidden name=\"Password\" value=\"$in{'Password'}\">\n";
	print "<P ALIGN=CENTER><IMG SRC=\"../admin/images/changing.gif\" WIDTH=\"160\" HEIGHT=\"36\" ALIGN=\"BOTTOM\"\n";
	print "NATURALSIZEFLAG=\"3\"></P>\n";
	print "\n";
	print "<P><FONT SIZE=-1>To change a story, \n";
	print "edit the headline, the lead\n";
	print "paragraph (limited to 40 characters), and the body of the story. The headline and lead\n";
	print "paragraph will be shown to users in the list of all stories available.</FONT></P>\n";
	print "\n";
	print "<P><TABLE WIDTH=\"100%\" BORDER=\"0\" CELLSPACING=\"0\" CELLPADDING=\"0\">\n";
	print "</TR>\n";
	print "<TR>\n";
	print "<TD VALIGN=\"TOP\"><P ALIGN=RIGHT><B><FONT SIZE=-1>Headline:</FONT></B></TD>\n";
	print "<TD><INPUT NAME=\"Headline\" TYPE=\"text\" SIZE=\"50\" VALUE='@Head'></TD></TR>\n";
	print "<TR>\n";
	print "<TD VALIGN=\"TOP\"><P ALIGN=RIGHT><B><FONT SIZE=-1>Lead Paragraph:</FONT></B></TD>\n";
	print "<TD><INPUT NAME=\"Lead\" TYPE=\"text\" SIZE=\"40\" MAXLENGTH=\"40\" VALUE='@Lead'></TD></TR>\n";
        print "<TR>\n";
	print "<TD VALIGN=\"TOP\"><P ALIGN=RIGHT><B><FONT SIZE=-1>Body of Story:</FONT></B></TD>\n";
	print "<TD><TEXTAREA NAME=\"Body\" WRAP=\"VIRTUAL\" ROWS=\"10\" COLS=\"50\">\n";
	print "$alpha</TEXTAREA></TD></TR>\n";
	print "</TABLE>\n";
	print "</P>\n";
	print "\n";
	print "<P ALIGN=CENTER><INPUT NAME=\"name\" TYPE=\"submit\" VALUE=\"Change\">\n";
	print "<INPUT NAME=\"name\" TYPE=\"reset\" VALUE=\"Reset\"></P>\n";
	print "\n";
	print "</FORM>\n";
	footer();
}

if ($in{'action'} eq "change3") {
	# Check to see that all information was filled in
	if (($in{'Filename'} eq "") || ($in{'Headline'} eq "") || ($in{'Lead'} eq "") ||
		($in{'Body'} eq "") || ($in{'Password'} eq "")) { # Not all information was filled in
			&Error (Information_Incomplete);
	}
	
	unless ($in{'Password'} eq $Password) { # Password is incorrect
		&Error ("Password_Incorrect");
	}
	
	# Write the information to the file

	# Write the Headline, Lead Paragraph, and Body for future editing

	$fname = "$in{'Filename'}";
	@fname = split (/.html/ , $fname);
	open (NEWFILE,">$BaseDir/$fname[0].head");
	print NEWFILE "$in{'Headline'}";
	close NEWFILE;

	open (NEWFILE,">$BaseDir/$fname[0].lead");
	print NEWFILE "$in{'Lead'}";
	close NEWFILE;

	open (NEWFILE,">$BaseDir/$fname[0].body");
	print NEWFILE "$in{'Body'}";
	close NEWFILE;

	# Expand the comments for html
 	$in{'Body'} =~ s/\n/<BR>\n/go;

	open (NEWFILE,">$BaseDir/$in{'Filename'}");
	$Header = head1($in{'Headline'});
	print NEWFILE "$Header";
	$date = date();
	print NEWFILE "<FONT SIZE=-2>Posted on: $date</FONT><p>\n";
	print NEWFILE "<b><center><h2>$in{'Headline'}</h2></center></b>\n";
	print NEWFILE "<h3>$in{'Lead'}</h3><p>\n";
	print NEWFILE "$in{'Body'}<p>\n";
	$Footer = foot1();
	print NEWFILE "$Footer";
	close NEWFILE;
	
	# Now update the index file for that directory.
	
	open(GW,"$BaseDir/$DataFile");
	@lines = <GW>;
	close GW;
	
	open (GB,">$BaseDir/$DataFile");
	foreach $line (@lines) {
		chop $line;
		@TempData = split (/\t/, $line);
		
		if ($TempData[1] ne "$in{'Filename'}") {
			print GB "$line\n";
		}
	}
	close GB;

	open(GW,">>$BaseDir/$DataFile");
	print GW "$in{'Headline'}\t$in{'Filename'}\t$in{'Lead'}\n";
	close GW;

	header('Stories Changed');
	body('#FFFFFF');
	hr();
	print "<center><h1>Stories Changed!</h1></center>\n";
	print "The stories entitled $in{'Headline'} has been changed $BaseDir/$in{'Filename'}.<p>\n";
	footer();
	
}

if ($in{'action'} eq "") { # Display all available stories
	# Open the datafile

	open (DATA, "$BaseDir/$DataFile");
	@Data = <DATA>;
	close DATA;
	
	header('Available Stories');
	body('#D2B48C');
	print "<P ALIGN=CENTER><IMG SRC=\"$BaseURL/images/rates.gif\" WIDTH=\"160\" HEIGHT=\"74\" ALIGN=\"BOTTOM\"\n";
	hr();
	print "<font size=-1>Click on a headline to view the full article:<p></font>\n";
	foreach $Story (@Data) {
		@Temp = split (/\t/, $Story);
		print "<a href=\"$CGI_URL?action=view&item=$Temp[1]\" target=\"main\"><h2>$Temp[0]</a></h2>\n";
		print "$Temp[2]<p><hr><p>\n";
	}
	footer();
}

if ($in{'action'} eq "view") {
	print "Location: $BaseURL/$in{'item'}\n\n";
}

sub Error {
	local($UserError) = @_;
	
	if ($UserError eq "Information_Incomplete") {
		header('Information Incomplete');
		body('#FFFFFF');
		hr();
		print "<center><h2>Information Incomplete!</h2></center>\n";
		print "You did not fill out all required information.  Please go back and make sure every field is filled in before submitting.<p>\n";
		footer();
		exit;
	}
	
	if ($UserError eq "Password_Incorrect") {
		header('Incorrect password');
		body('#FFFFFF');
		hr();
		print "<center><h2>Incorrect Password!</h2></center>\n";
		print "The password you entered was incorrect.  Please go back and re-enter your password.<p>\n";
		footer();
		exit;
	}
}

sub UnWeb1 {
   # Get the input
#   read(STDIN, $buffer, $ENV{'QUERY_STRING'});

   # Split the name-value pairs
   @pairs = split(/&/, $ENV{'QUERY_STRING'});

   foreach $pair (@pairs) {
      ($name, $value) = split(/=/, $pair);

      # Un-Webify plus signs and %-encoding
      $value =~ tr/+/ /;
      $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
      $value =~ s/<!--(.|\n)*-->//g;

      if ($allow_html != 1) {
         $value =~ s/<([^>]|\n)*>//g;
      }
      else {
         unless ($name eq 'body') {
	    $value =~ s/<([^>]|\n)*>//g;
         }
      }

      $in{$name} = $value;
   }

}

sub UnWeb {

   # Get the input
   read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});

   # Split the name-value pairs
   @pairs = split(/&/, $buffer);

   foreach $pair (@pairs) {
      ($name, $value) = split(/=/, $pair);

      # Un-Webify plus signs and %-encoding
      $value =~ tr/+/ /;
      $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
      $value =~ s/<!--(.|\n)*-->//g;

      if ($AllowHTML != 1) {
         $value =~ s/<([^>]|\n)*>//g;
      }
      else {
         unless ($name eq 'body') {
	    $value =~ s/<([^>]|\n)*>//g;
         }
      }

      $in{$name} = $value;
   }

}