#!/usr/bin/perl
#############################################################################
# Online Administrative Feedback Form (v1.0)                                #
# Created 5/97                                                              #
#                                                                           #
# Copyright 1997 Randy Jae Weinstein. All Rights Reserved.                  #
# Randy Jae Weinstein                                                       #
# Author EMail: rw263@NYU.EDU                                               #
# Author HomePage: http://homepages.NYU.EDU/~rw263/                         #
#                                                                           #
# New features in this version:                                             #
# -Paginated guestbook entries (10 entries/page)                            #
# -admin can delete entries via check-box online form                       #
# -admin can ban/unban ips                                                  #
#                                                                           #
# In the works for next version:                                            #
#  -allow admin to set maximum number of entries, and have the early        #
#   entries deleted when that limit is reached                              #
#  -editable guestbook style (GBML Tags) via a name/pwd of administrator    #
#   GBML Tags allow - a type of template as to how the output should be     #
#                     displayed stands for GuestBook Markup Language :-)    #
#  -Multiple Guestbooks                                                     #
#   Auto creation/deletion of guestbooks                                    #
#                                                                           #
### Modified From ###########################################################
# Guestbook                     Version 2.3.1                               #
# Created 4/21/95               Last Modified 10/29/95                      #
#                                                                           #
# WWWBoard Admin                Version 2.0 ALPHA 2                         #
# Created 10/21/95              Last Modified 11/25/95                      #
#                                                                           #
# Copyright 1996 Matt Wright    mattw@worldwidemart.com                     #
# Scripts Archive at:           http://www.worldwidemart.com/scripts/       #
# Copyright 1996 Matthew M. Wright  All Rights Reserved.                    #
#############################################################################
# Set Variables

$baseDir = "../www";                       # 'mesgFile' is located in this dir
                                           # IMPORTANT: 'chmod 600 mesgFile'
$baseUrl = "http://Your.Host.COM";         # URL of above directory
$cgiUrl = "$baseUrl/cgi-bin/feedback.cgi"; # where is this script placed?
                                           # IMPORTANT: 'chmod 755 thisCgiScript'
$mesgFile = "$baseDir/entries";              # contents of the starter 'mesgFile':
                                             #  default Name/Pwd: WebAdmin/WebBoard
                                             #  <!--Name/Pwd: WebAdmin:aepTOqxOi4i8U-->
                                             #  <!--Restrict IP: -->
                                             #  <!--Add Here: 0-->
$mailProg = '/usr/lib/sendmail -t';        # where is your sendmail located
$recipient = 'you@Where.COM';              # Your EMail Address
$recipientName = 'Your Full Name';         # Your Full Name

$allowHtml = 1;                            # 1 = Yes; 0 = No

############################### Done Editing! ###############################
######################## Actual Script Starts Here!! ########################

#############################################################################
# Retrieve Date
#############################################################################
&getDate;

$query = $ENV{'QUERY_STRING'};
$command = '';
$page = 1;
$USER = '';
$PWD = '';
if ($query) {
  if ($query =~ /&/) {
    @queryString = split(/&/,$query);
    foreach $qString (@queryString) {
      if ($qString =~ m/Page=(\d+)/) {
        $page = $1;
      }
      elsif ($qString =~ m/User=(.*)/) {
        $USER = $1;
      }
      elsif ($qString =~ m/Pwd=(.*)/) {
        $PWD = $1;
      }
      else {
        $command = $qString;
      }
    }
  }
  elsif ($query =~ /Page=(\d+)/) {
    $page = $1;
  }
  else {
    $command = $query;    
  }
}
else {
  &parseForm;
}

#############################################################################
# Remove
#       Using this method allows you to delete all messages posted before
#   a certain date.
#############################################################################
if ($command eq 'Remove') {
  &header('<title>Remove Unwanted Entries From Your Suggestion Box</title>');
  print " <center>\n";
  print "  <h1>Remove Unwanted Entries</h1>\n";
  print "  Select entries you wish to remove an then click the button below.<br>\n";
  print "  You may also delete IPs in a similar manner.<br>\n";
  print "  (It's possible to delete/ban multiple entries)\n";
  print " </center>\n";
  print " <form method=post action=\"$cgiUrl\">\n";
  print "  <input type=hidden name=action value=Remove>\n";
  print "  <input type=hidden name=USER value=\"$USER\">\n";
  print "  <input type=hidden name=PWD value=\"$PWD\">\n";

  open(MESG,"$mesgFile") || &error(mesgFile);
  @lines = <MESG>;
  $size = @lines;
  close(MESG);

  #Number,IP,Name,URL,URL,Date,Comments
  $totalPage = int(($size-3)/10 + .95);
  $totalPage = 1 unless ($totalPage > 0);
  if ($page > $totalPage) {
    $page = 1;
  }
  $pageEntryMin = ($page-1)*10;
  $pageEntryMax = ($page*10)+1;
  $entry = -3;  # Init to -3, since 3 starter lines

  print "  <table width=\"100%\"><tr>\n";
  print "   <td width=\"25%\" align=center><hr noshade size=4></td>\n";
  $entryPlural = "Entr" . ($size-3 != 1 ? "ies" : "y");
  $pagePlural = "Page" . ($totalPage != 1 ? "s" : "");
  print "   <td width=\"50%\" align=center>Info: ",$size-3," $entryPlural on $totalPage $pagePlural &#183; Current Page: $page</td>\n";
  print "   <td width=\"25%\" align=center><hr noshade size=4></td>\n";
  print "  </tr></table><p>\n";
  print "  <table width=\"100%\">\n";

  foreach $line (@lines) {
    $entry++;
    next if ($line =~ m/<!--Name\/Pwd: (.*):(.*)-->/);
    next if ($line =~ m/<!--Restrict IP: (.*)-->/);
    next if ($line =~ m/<!--Add Here: (\d+)-->/);
    next if (($entry<=$pageEntryMin) || ($entry>=$pageEntryMax));

    @entry = split(/\cR/, $line);
    $EntryNumber{$line} = $entry[0];
    $IP{$line}          = $entry[1];
    $Name{$line}        = $entry[2];
    $EMail{$line}       = $entry[3];
    $URL{$line}         = $entry[4];
    $Date{$line}        = $entry[5];
    $Comments{$line}    = $entry[6];

    print "   <tr>\n";
    print "    <td align=center valign=top><input type=checkbox name=remove$EntryNumber{$line} value=$EntryNumber{$line}><br></td>\n";
    print "    <td>\n";
    print "     <b>From:</b> $Name{$line} (<input type=checkbox name=ban$EntryNumber{$line} value=$IP{$line}>IP: $IP{$line})<br>\n";
    if ($EMail{$line}) {
      print "     <b>EMail:</b> $EMail{$line}<br>\n";
    }
    if ($URL{$line}) {
      print "     <b>URL:</b> $URL{$line}<br>\n";
    }
    print "     <b>Date:</b> $Date{$line}<br>\n";
    print "     <blockquote>\n";
    print "      $Comments{$line}";
    print "     </blockquote><p><br><br>\n";
    print "    </td>\n";
    print "   </tr>\n";

    push(@usedValues,$EntryNumber{$line});
  }

  print "  </table>\n";
  print "  <input type=hidden name=usedValues value=\"@usedValues\">\n";
  print "  <center>\n";
  print "   <table width=\"100%\"><tr>\n";
  if (($totalPage<=1) || ($page==1)) {
    print "   <td>Previous Page</td>\n";
  }
  else {
    print "    <td>Previous Page<input type=radio name=prevNext value=",$page-1,"></td>\n";
  }
  print "    <td align=center>\n";
  print "     <input type=submit value=\"Process Information\">\n";
  print "     <input type=reset value=\"Clear Form\">\n";
  print "    </td>\n";
  if (($totalPage<=1) || ($page==$totalPage)) {
    print "    <td align=right>Next Page</td>\n";
  }
  else {
    print "    <td align=right><input type=radio name=prevNext value=",$page+1,">Next Page</td>\n";
  }
  print "   </tr></table>\n";

  print "   <p><hr noshade size=4><br>\n";
  print "   [<a href=\"$cgiUrl\?Page=1\">Suggestion Box</a>] [<a href=\"$cgiUrl\?Supervisor\">Supervisor's Page</a>]\n";
  print "  </center>\n";
  print " </form>\n";
  print " <p><center><font size=1>Online Administrative Feedback Form script created by <a href=\"http://homepages.NYU.EDU/~rw263/\">Randy Jae Weinstein</a></font></center>\n\n";
  print "</body>\n";
  print "</html>\n";

  exit;
}


#############################################################################
# Remove Action
#   This portion is used by the method remove
#############################################################################
elsif ($FORM{'action'} eq 'Remove') {
  &checkPasswd;

  @usedValues = split(/\s/,$FORM{'usedValues'});
  foreach $usedValue (@usedValues) {
    if ($FORM{'remove'.$usedValue}) {
      push(@REMOVE, $usedValue);
    }
    if ($FORM{'ban'.$usedValue}) {
      push(@BAN, $FORM{'ban'.$usedValue});
    }
  }

  open(MESG,"$mesgFile") || &error(mesgFile);
  @lines = <MESG>;
  close(MESG);

  foreach $line (@lines) {
    next if ($line =~ m/<!--Name\/Pwd: (.*):(.*)-->/);
    if ($line =~ m/<!--Restrict IP: (.*)-->/) {
      $curIPs = $1;
      foreach $single (@BAN) {
        $curIPs .= ','.$single;
      }
      $line = '<!--Restrict IP: '.$curIPs."-->\n";
      $line =~ s/ ,/ /g;
    }
    next if ($line =~ m/<!--Add Here: (\d+)-->/);
    @TempData = split(/\cR/, $line);
    foreach $single (@REMOVE) {
      if ($TempData[0] eq "$single") {
        $line = '';
      }
    }
  }

  open(MESG,">$mesgFile") || &error(noEntryChange);
  print MESG @lines;
  close(MESG);

  &returnHtml(Remove);
}


#############################################################################
# IP Editing
#############################################################################
elsif ($command eq 'IPAccess') {
  &header('Ban/Unban IP Addresses From Your Suggestion Box');
  print " <center>\n";
  print "  <h1>Ban/UnBan IP Addresses</h1>\n";
  print "  <p>Bans a given site from future access to the Feedback Form/Suggestion Box.<br>\n";
  print "  The IP address can be specified in the form of x.x.x.x to ban a specific machine,<br>\n";
  print "  or as x.x. or x.x.x. to ban an entire domain or subnet.\n";
 
  print "  <p><hr noshade size=4><br>\n";
  print "  <form method=post action=\"$cgiUrl\">\n";
  print "   <input type=hidden name=action value=IPAccess>\n";
  print "   <input type=hidden name=USER value=\"$USER\">\n";
  print "   <input type=hidden name=PWD value=\"$PWD\">\n";
  print "   <table border=4 cellpadding=0 cellspacing=0 width=\"75%\">\n";
  print "    <tr>\n";
  print "     <th><br>Ban<p></th>\n";
  print "     <th>UnBan</th>\n";
  print "     <th>IP Address</th>\n";
  print "    </tr>\n";
 
  open(MESG,"$mesgFile") || &error(mesgFile);
  @ipLines = <MESG>;
  close(MESG);

  $lineNum = 0;
  foreach $line (@ipLines) {
    if ($line =~ m/<!--Restrict IP: (.*)-->/) {
      @IPs = split(/,/, $1);
      @sortedIPs = (sort { $a <=> $b } @IPs);

      foreach $ipEntry (@sortedIPs) {
        $lineNum++;
        print "    <tr>\n";
        print "     <td>&nbsp;</td>\n";
        print "     <td align=center><input type=checkbox name=unban$lineNum value=$ipEntry></td>\n";
        print "     <td align=center>$ipEntry</td>\n";
        print "    </tr>\n";
        push(@usedFormValues,$ipEntry);
      }
    }
  }
  print "    <tr>\n";
  print "     <td align=center>x</td>\n";
  print "     <td>&nbsp;</td>\n";
  print "     <td align=center><input type=text name=ban size=15 maxlength=15></td>\n";
  print "    </tr>\n";
  print "    <tr>\n";
  print "     <td align=center colspan=3>\n";
  print "      <br><input type=submit value=\"Process Information\">\n";
  print "      <input type=reset value=\"Clear Form\"><p>\n";
  print "     </td>\n";
  print "    </tr>\n";
  print "   </table>\n";
  print "   <input type=hidden name=usedValues value=\"@usedFormValues\">\n";
  print "  </form>\n";
  print "  <p><hr noshade size=4><br>\n";
  print "  [<a href=\"$cgiUrl\?Page=1\">Suggestion Box</a>] [<a href=\"$cgiUrl\?Supervisor\">Supervisor's Page</a>]\n";
  print " </center>\n";
  print " <p><center><font size=1>Online Administrative Feedback Form script created by <a href=\"http://homepages.NYU.EDU/~rw263/\">Randy Jae Weinstein</a></font></center>\n\n";
  print "</body>\n";
  print "</html>\n";

  exit;
}


#############################################################################
# IPAccess Action
#############################################################################
elsif ($FORM{'action'} eq 'IPAccess') {
  &checkPasswd;
 
  @usedValues = split(/\s/,$FORM{'usedValues'});
  $lineNum = 0;
  foreach $usedValue (@usedValues) {
    $lineNum++;
    if ($FORM{'unban'.$lineNum}) {
      push(@IP, $usedValue);
    }
  }

  open(MESG,"$mesgFile") || &error(mesgFile);
  @IPs = <MESG>;
  close(MESG);

  foreach $line (@IPs) {
    if ($line =~ m/<!--Restrict IP: (.*)-->/) {
      $curIPs = $1;
      foreach $ip (@IP) {
        $curIPs =~ s/$ip//;
      }
      $line = '<!--Restrict IP: '.$curIPs."-->\n";
      if ($FORM{'ban'}) { 
	if (($FORM{'ban'} =~ /(\d+)\.(\d+)\./) ||
            ($FORM{'ban'} =~ /(\d+)\.(\d+)\.(\d+)\./) ||
            ($FORM{'ban'} =~ /(\d+)\.(\d+)\.(\d+)\.(\d+)/)) {
 	  $line = '<!--Restrict IP: '.$curIPs.','.$FORM{'ban'}."-->\n";
        }
      }
      $line =~ s/ ,/ /g;
      $line =~ s/,,/,/g;
      $line =~ s/,-/-/;
    }
  }

  open(MESG,">$mesgFile") || &error(noEntryChange);
  print MESG @IPs;
  close(MESG);

  &returnHtml(IPAccess);
}


#############################################################################
# Change Password
#       By calling this section of the script, the admin can change his or
#   her password.
#############################################################################
elsif ($command eq 'changePassword') {
  &header('Change Admin Password');
  print " <center>\n";
  print "  <h1>Change Admin Password</h1>\n";
  print "  Fill out the form below completely to change your password and user name.<br>\n";
  print "  If new username is left blank, your old one will be assumed.\n";
  print "  <p><hr noshade size=4><p>\n";
  print "  <form method=post action=\"$cgiUrl\">\n";
  print "   <input type=hidden name=action value=changePassword>\n";
  print "   <input type=hidden name=USER value=\"$USER\">\n";
  print "   <input type=hidden name=PWD value=\"$PWD\">\n";
  print "   <table border=0>\n";
  print "    <tr>\n";
  print "     <th align=left>New Username: </th>\n";
  print "     <td><input type=text name=newUsername size=15 maxlength=15><br></td>\n";
  print "    </tr>\n";
  print "    <tr>\n";
  print "     <th align=left>New Password: </th>\n";
  print "     <td><input type=password name=passwd1 size=15 maxlength=15><br></td>\n";
  print "     </tr>\n";
  print "    <tr>\n";
  print "     <th align=left>Re-type New Password: </th>\n";
  print "     <td><input type=password name=passwd2 size=15 maxlength=15><br></td>\n";
  print "    </tr>\n";
  print "    <tr>\n";
  print "     <td align=center colspan=2>\n";
  print "      <br><input type=submit value=\"Process Information\">\n";
  print "      <input type=reset value=\"Clear Form\">\n";
  print "     </td>\n";
  print "    </tr>\n";
  print "   </table>\n";
  print "  </form>\n";
  print "  <p><hr noshade size=4><br>\n";
  print "  [<a href=\"$cgiUrl\?Page=1\">Suggestion Box</a>] [<a href=\"$cgiUrl\?Supervisor\">Supervisor's Page</a>]\n";
  print " </center>\n";
  print " <p><center><font size=1>Online Administrative Feedback Form script created by <a href=\"http://homepages.NYU.EDU/~rw263/\">Randy Jae Weinstein</a></font></center>\n\n";
  print "</body>\n";
  print "</html>\n";

  exit;
}


#############################################################################
# Change Password
#############################################################################
elsif ($FORM{'action'} eq 'changePassword') {
  open(MESG,"$mesgFile") || &error(mesgFile);
  @passwdLines = <MESG>;
  close(MESG);

  foreach $line (@passwdLines) {
    if ($line =~ m/<!--Name\/Pwd: (.*):(.*)-->/) { 
      $username = $1;
      $passwd = $2;

      srand(time ^ $$);                               # random seed
      @saltchars = ('a'..'z','A'..'Z',0..9,'.','/');  # valid salt chars
      $salt = $saltchars[int(rand($#saltchars+1))];   # first random salt char
      $salt .= $saltchars[int(rand($#saltchars+1))];  # second random salt char

      $newPasswd = crypt($FORM{'passwd1'}, $salt);
      if ($FORM{'newUsername'}) {
        $newUsername = $FORM{'newUsername'};
      }
      else {
        $newUsername = $FORM{'USER'};
      }
      $line =~ s/$username:$passwd/$newUsername:$newPasswd/;
    }
  }

  if (($FORM{'passwd1'} ne $FORM{'passwd2'}) || (length($FORM{'passwd1'})<5)) {
    &error(notSame);
  }

  if (($FORM{'PWD'} eq $passwd) && ($FORM{'USER'} eq $username)) {
    open(PASSWD,">$mesgFile") || &error(noPasswdChange);
    print PASSWD @passwdLines;
    close(PASSWD);
  }
  else {
    &error(badCombo);
  }

  &returnHtml(changePassword);
}


###############################################################################
# Enter Password
###############################################################################
elsif ($FORM{'action'} eq 'enterPasswd') {
  open(MESG,"$mesgFile") || &error(mesgFile);
  @passwdLines = <MESG>;
  close(MESG);

  foreach $line (@passwdLines) {
    if ($line =~ m/<!--Name\/Pwd: (.*):(.*)-->/) { 
      $username = $1;
      $passwd = $2;
    }
  }

  if ($FORM{'USER'} && $FORM{'PWD'}) {
    if (!(($FORM{'PWD'} eq $passwd) && ($FORM{'USER'} eq $username))) {
      &error(badCombo);
    }
  }
  else {
    $testPasswd = crypt($FORM{'password'}, substr($passwd, 0, 2));
    if (!(($testPasswd eq $passwd) && ($FORM{'username'} eq $username))) {
      &error(badCombo);
    }
  }
  $USER = $username;
  $PWD = $testPasswd;
  &returnHtml(enterPasswd);
}


#############################################################################
# Wants to goto Admin Options
#############################################################################
elsif ($command eq 'Supervisor') {
  &header('Supervisor Page');
  print " <center>\n";
  print "  <h1>Supervisor Page</h1>\n";
  print "  <p><hr noshade size=4><p>\n";
  print "  <form method=post action=\"$cgiUrl\">\n";
  print "   <input type=hidden name=action value=enterPasswd>\n";
  print "   <table border=0>\n";
  print "    <tr>\n";
  print "     <th>Username: <input type=text name=username size=15 maxlength=15></th>\n";
  print "    </tr>\n";
  print "    <tr>\n";
  print "     <th>Password: <input type=password name=password size=15 maxlength=15><p></th>\n";
  print "    </tr>\n";
  print "    <tr>\n";
  print "     <td>\n";
  print "      <input type=radio name=command value=IPAccess>Ban/UnBan IPs<p>\n";
  print "      <input type=radio name=command value=changePassword>Change Admin Password<p>\n";
  print "      <input type=radio name=command value=Remove>Remove Entries from Suggestion Box<p>\n";
  print "     </td>\n";
  print "    </tr>\n";
  print "    <tr>\n";
  print "     <td align=center>\n";
  print "      <input type=submit value=\"Process Information\">\n";
  print "      <input type=reset value=\"Clear Form\">\n";
  print "     </td>\n";
  print "    </tr>\n";
  print "   </table>\n";
  print "  </form>\n";
  print "  <p><hr noshade size=4><br>\n";
  print "  [<a href=\"$cgiUrl\?Page=1\">Suggestion Box</a>]\n";
  print " </center>\n";
  print " <p><center><font size=1>Online Administrative Feedback Form script created by <a href=\"http://homepages.NYU.EDU/~rw263/\">Randy Jae Weinstein</a></font></center>\n\n";
  print "</body>\n";
  print "</html>\n";

  exit;
}


#############################################################################
# Print out a nice header. Will prob change for every Feedback Form
#############################################################################
elsif ($command eq 'Feedback') {
  &getAccess;

  &header('Feedback Form');
print <<FeedbackForm;
 <center><font size="+6"><b>Feedback</b></font></center>
 <br>
 <form method=post action="$cgiUrl">
  <input type=hidden name=action value=add>
   <center><table width="100%">
   <tr>
    <td nowrap>
     Name: <input name=Name size=30 maxlength=60 value=""><p>
     Email: <input name=EMail size=30 maxlength=60 value=""><p>
     Home Page: <input name=URL size=30 maxlength=60 value="http://">
    </td>
    <td align=right>
     Submit any comments you like: suggestions, criticisms, personal greetings,
     random musings, whatever you want. I'll only remove comments that are
     illegal, or non-constructive (intended only to annoy other people)</td>
   </tr>
   <tr>
    <td align=left colspan=2>
     <br>Comments:
    </td>
   </tr>
   <tr>
    <td colspan=2 align=center>
     <textarea name=Comments rows=10 cols=65 wrap=soft></textarea>
    </td>
   </tr>
   <tr>
    <td align=left>
     <a href="$cgiUrl\?Page=1">Suggestion Box</a><br>
     <a href="$cgiUrl\?Supervisor">Supervisor Page</a>
    </td>
    <td align=right>
     <input type=submit value="Send Comments">  
     <input type=reset value="Clear Form">
    </td>
   </tr>
  </table></center>
 </form>
 <p><center><font size=1>Online Administrative Feedback Form script created by <a href=\"http://homepages.NYU.EDU/~rw263/\">Randy Jae Weinstein</a></font></center>

</body>
</html>
FeedbackForm

  exit;
}


#############################################################################
# Add to Suggestion Box
#############################################################################
elsif ($FORM{'action'} eq 'add') {
  &getAccess;

  # Print the Blank Response Subroutines
  &noNameOrNoComment unless $FORM{'Comments'};
  &noNameOrNoComment unless $FORM{'Name'};

  # Begin the Editing of the Guestbook File
  open(MESG,"$mesgFile") || &error(mesgFile);
  @lines = <MESG>;
  close(MESG);
  $size = @lines;

  if (!(&checkEmail($FORM{'EMail'}))) {
    $FORM{'EMail'} = "";
  }
  if ($FORM{'URL'} eq 'http://' || $FORM{'URL'} !~ /^(f|ht)tp:\/\/\w+\.\w+/) {
    $FORM{'URL'} = "";
  }

  # Open Link File to Output
  open(MESG,">$mesgFile") || &error(noEntryChange);

  for ($i=0; $i<=$size; $i++) {
    $_ = $lines[$i];
    if (/<!--Add Here: (\d+)-->/) { 
      $EntryNumber = $1;    
      $EntryNumber++;
      print MESG "<!--Add Here: $EntryNumber-->\n";
      print MESG "$EntryNumber\cR$ENV{'REMOTE_ADDR'}\cR$FORM{'Name'}\cR$FORM{'EMail'}\cR$FORM{'URL'}\cR$date\cR$FORM{'Comments'}\n";
    }
    else {
      print MESG $_;
    }
  }
  close (MESG);

  # Print Out Thank You message
  &thankYou;
}


#############################################################################
# Actual Suggestion Box
#############################################################################
else {
  &getAccess;

  open(MESG,"$mesgFile") || &error(mesgFile);
  @lines = <MESG>;
  close(MESG);
  $size = @lines;
  
  $totalPage = int(($size-3)/10 + .95);
  $totalPage = 1 unless ($totalPage > 0);
  if ($page > $totalPage) {
    $page = 1;
  }
  $pageEntryMin = ($page-1)*10;
  $pageEntryMax = ($page*10)+1;
  $entry = -3;  # Init to -3, since 3 starter lines
  $entryPlural = "Entr" . ($size-3 != 1 ? "ies" : "y");
  $pagePlural = "Page" . ($totalPage != 1 ? "s" : "");

  &header('Suggestion Box');
  print " <center><font size=\"+6\"><b>Suggestion Box</b></font></center>\n";
  print " <br>\n\n";
  print " <center><font size=\"-1\">\n";
  print "  Info: ",$size-3," $entryPlural on $totalPage $pagePlural &#183; Current Page: $page\n";
  print " </font></center>\n";
  print " <table width=\"100%\" cellspacing=10>\n";
  print "  <tr>\n";
  print "   <td>\n";
  print "    Here's your chance to say whatever's on your mind concerning me. Please\n";
  print "    though, don't write anything intended <i>solely</i> to annoy or cause\n";
  print "    offense, I'll only have to remove it. All other comments, including\n";
  print "    constructive criticism, are welcome. Needless to say, none of these\n";
  print "    comments necessarily reflect my opinion on anything.\n";
  print "   </td>\n";
  print "   <td width=100>\n";
  print "    <a href=\"$cgiUrl\?Feedback\">Submit a comment</a>\n";
  print "   </td>\n";
  print "  </tr>\n";
  print " </table>\n\n";
  print " <br>\n";
  print " <hr noshade>\n\n";

foreach $line (@lines) {
    $entry++;
    next if ($line =~ m/<!--Name\/Pwd: (.*):(.*)-->/);
    next if ($line =~ m/<!--Restrict IP: (.*)-->/);
    next if ($line =~ m/<!--Add Here: (\d+)-->/);
    next if (($entry<=$pageEntryMin) || ($entry>=$pageEntryMax));

    @entry = split(/\cR/, $line);
    $EntryNumber{$line} = $entry[0];
    $IP{$line}          = $entry[1];
    $Name{$line}        = $entry[2];
    $EMail{$line}       = $entry[3];
    $URL{$line}         = $entry[4];
    $Date{$line}        = $entry[5];
    $Comments{$line}    = $entry[6];

    print " <table width=\"100%\">\n";
    print "  <tr>\n";
    print "   <td align=left>\n";
    if ($URL{$line}) {
      print "    <b><a href=\"$URL{$line}\">$Name{$line}</a></b>";
    }
    else {
      print "    <b>$Name{$line}</b>";
    }
    if ($EMail{$line}) {
      print " (<a href=\"mailto:$EMail{$line}\">$EMail{$line}</a>)<br>\n";
    }
    else {
      print "<br>\n";
    }
    print "   </td>\n";
    print "   <td align=right>$Date{$line}</td>\n";
    print "  </tr>\n";
    print "  <tr>\n";
    print "   <td colspan=2><blockquote>\n";
    print "    $Comments{$line}";
    print "   </blockquote></td>\n";
    print "  </tr>\n";
    print " </table><hr noshade>\n\n";
  }

  print " <center>\n";
  if ($totalPage <= 1) {
    print "  Previous Page | Next Page\n";
  }
  elsif ($page == 1) {
    print "  Previous Page | <a href=\"$cgiUrl\?Page=",$page+1,"\">Next Page</a>\n";
  }
  elsif ($page == $totalPage) {
    print "  <a href=\"$cgiUrl\?Page=",$page-1,"\">Previous Page</a> | Next Page\n";
  }
  else {
    print "  <a href=\"$cgiUrl\?Page=",$page-1,"\">Previous Page</a> | <a href=\"$cgiUrl\?Page=",$page+1,"\">Next Page</a>\n";
  }
  print " </center>\n";
  print " <p><center><font size=1>Online Administrative Feedback Form script created by <a href=\"http://homepages.NYU.EDU/~rw263/\">Randy Jae Weinstein</a></font></center>\n\n";
  print "</body>\n";
  print "</html>\n";

  exit;
}


#############################################################################
################################ Subroutines ################################

#############################################################################
# Are they allowed access?
#############################################################################
sub getAccess {
  open(MESG,"$mesgFile") || &error(mesgFile);
  @IPs = <MESG>;
  close(MESG);

  foreach $line (@IPs) {
    next unless $line;
    if ($line =~ m/<!--Restrict IP: (.*)-->/) {
      @IPs = split(/,/, $1);
      foreach $ip (@IPs) {
        if ($ENV{'REMOTE_ADDR'}) { 
          if ($ENV{'REMOTE_ADDR'} =~ /$ip/) {
	    &error(noAccess);
          }
        }
      }
    }
  }
}

#############################################################################
# Get the Date for Entry
#############################################################################
sub getDate {
  @days = ('Sunday','Monday','Tuesday','Wednesday','Thursday','Friday',
           'Saturday');
  @months = ('January','February','March','April','May','June','July',
             'August','September','October','November','December'); 
  (undef,$min,$hour,$mDay,$mon,$year,$wDay,undef,undef) = localtime(time);
  $year = substr($year, 1, 2);  # $year = substr($year, 2);
  if ($hour == 0) { $hour = 12; $ampm = "am"; }
  elsif ($hour == 12) { $ampm = "pm"; }
  elsif ($hour > 12) { $hour -= 12; $ampm = "pm"; } 
  else { $ampm = "am";}
  if ($min < 10) { $min = "0$min"; }

  $date = "$days[$wDay], $mDay $months[$mon] `$year at $hour\:$min$ampm";
}


#############################################################################
# Print out a nice header. Will prob change for every Feedback Form
#############################################################################
sub header {
print <<Header;
Content-type: text/html

<html>
<head>
 <!-- Copyright 1997 Randy Jae Weinstein. All Rights Reserved. -->
 <meta name=Script content="Online Administrative Feedback Form">
 <meta name=Author content="Randy Jae Weinstein">
 <meta name=EMail  content="rw263\@is7.NYU.EDU">
 <title>$_[0]</title>
</head>
<body link="#0000ee" alink="#ff0000" vlink="#551a8b" text="#000000">
  
Header
}


#############################################################################
# A Name or a Comment was left out of the Feedback Form
#############################################################################
sub noNameOrNoComment {
  &header('Feedback Form');
  print " <center><font size=\"+6\"><b>Feedback</b></font></center>\n";
  print " <br>\n";
  print " <br>\n";
  print " <br>\n";
  print " <h2>Form error</h2>\n";
  print " Some of the required fields were missing from the form you submitted.<br>\n";
  print " Please fill in all the boxes and re-send.<p>\n";
  print " <br>\n\n";
  print " <table width=\"100%\"><tr>\n";
  print "  <td width=\"50%\" align=left><a href=\"$cgiUrl\?Feedback\">Return to form</a></td>\n";
  print "  <td width=\"50%\" align=right><a href=\"$cgiUrl\?Page=1\">Suggestion Box</a></td>\n";
  print " </tr></table>\n";
  print " <p><center><font size=1>Online Administrative Feedback Form script created by <a href=\"http://homepages.NYU.EDU/~rw263/\">Randy Jae Weinstein</a></font></center>\n\n";
  print "</body>\n";
  print "</html>\n";

  exit;
}


#############################################################################
# Thank You
#############################################################################
sub thankYou {
  &header('Feedback Form');
  print " <center><font size=\"+6\"><b>Feedback</b></font></center>\n";
  print " <br>\n";
  print " <h2>Thanks!</h2>\n";
  print " You have submitted the following comments to the suggestion box:<br>\n";
  print " <hr noshade><br>\n\n";
  print " <table width=\"100%\">\n";
  print "  <tr>\n";
  print "   <td align=left>\n";
  if ($FORM{'URL'}) {
    print "    <b><a href=\"$FORM{'URL'}\">$FORM{'Name'}</a></b>";
  }
  else{
    print "    <b>$FORM{'Name'}</b>";
  }
  if ($FORM{'EMail'}) {
    print " (<a href=\"mailto:$FORM{'EMail'}\">$FORM{'EMail'}</a>)<br>\n";
  }
  else {
    print "<br>\n";
  }
  print "   </td>\n";
  print "   <td align=right>$date</td>\n";
  print "  </tr>\n";
  print "  <tr>\n";
  print "   <td colspan=2><blockquote>\n";
  print "    $FORM{'Comments'}";
  print "   </blockquote></td>\n";
  print "  </tr>\n";
  print " </table><hr noshade>\n\n";
  print " <br>\n\n";
  print " <table width=\"100%\"><tr>\n";
  print "  <td width=\"100%\" align=left><a href=\"$cgiUrl\?Page=1\">See Suggestion Box</a></td>\n";
  print " </tr></table>\n";
  print " <p><center><font size=1>Online Administrative Feedback Form script created by <a href=\"http://homepages.NYU.EDU/~rw263/\">Randy Jae Weinstein</a></font></center>\n\n";
  print "</body>\n";
  print "</html>\n";

  exit;
}


#############################################################################
# Parse it
#############################################################################
sub parseForm {
  # Get the input
  $FORM{'action'} = '';
  read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});

  # Split the name-value pairs
  @pairs = split(/&/, $buffer);

  foreach $pair (@pairs) {
    ($name, $value) = split(/=/, $pair);

    # Un-Webify plus signs and %-encoding
    $value =~ tr/+/ /;
    $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
    $value =~ s/<!--(.|\n)*-->//g;
    $value =~ s/\"/&quot;/g;
    $value =~ s/&/&amp;/g;
    $value =~ s/\n/<br>/g;

    if ($allowHtml != 1) {
      $value =~ s/<([^>]|\n)*>//g;
    }

    $FORM{$name} = $value;
  }
}


#############################################################################
# return information from the html
#############################################################################
sub returnHtml {
  $type = $_[0];
  if ($type eq 'Remove') {
    if ($FORM{'prevNext'}) {
      print "Location: $cgiUrl\?Remove&Page=$FORM{'prevNext'}&User=$FORM{'USER'}&Pwd=$FORM{'PWD'}\n\n";
    }
    else {
      print "Location: $cgiUrl\?Remove&Page=1&User=$FORM{'USER'}&Pwd=$FORM{'PWD'}\n\n";
    }
  }
  elsif ($type eq 'IPAccess') {
    print "Location: $cgiUrl\?IPAccess&User=$FORM{'USER'}&Pwd=$FORM{'PWD'}\n\n";
  }
  elsif ($type eq 'enterPasswd') {
    if ($FORM{'command'}) {
      if ($FORM{'command'} eq 'Remove')  {
        print "Location: $cgiUrl\?Remove&Page=1&User=$USER&Pwd=$PWD\n\n";
      }
      else {
        print "Location: $cgiUrl\?$FORM{'command'}&User=$USER&Pwd=$PWD\n\n";
      }
    }
    else {
      print "Location: $cgiUrl\?Page=1\n\n";
    }
  }
  elsif ($type eq 'changePassword') {
    open(MAIL, "|$mailProg") || &error(mailProg);
    print MAIL "To: $recipient\n";
    print MAIL "From: $recipient ($recipientName)\n";
    print MAIL "Subject: Suggestion Box: Password Change\n\n";
    print MAIL "Your Password for Administration has been changed! Results are below:\n";
    print MAIL "-----------------------------------------------------------------------------\n";
    print MAIL "New Username: $newUsername\n";
    print MAIL "New Password: $FORM{'passwd1'}\n\n";
    print MAIL "-$date\n";
    print MAIL "-----------------------------------------------------------------------------\n";
    print MAIL "Do not forget these, since they are now encoded in a file, and not readable!\n\n";
    close (MAIL);

    &header('Admin Password Changed');
    print " <center>\n";
    print "  <h1>Admin Password Changed</h1>\n";    
    print "  Your Password for Admin has been changed!  Results are below:<p><hr noshade size=4><p>\n";
    print "  <b>New Username: $newUsername<p>\n";
    print "  New Password: $FORM{'passwd1'}</b><p>\n";
    print "  <hr noshade><p>\n";
    print "  Do not forget these, since they are now encoded in a file, and not readable!\n";
    print "  <p><hr noshade size=4><br>\n";
    print "  [<a href=\"$cgiUrl\?Page=1\">Suggestion Box</a>] [<a href=\"$cgiUrl\?Supervisor\">Supervisor's Page</a>]\n";
    print " </center>\n\n";
    print "</body>\n";
    print "</html>\n";

    exit;
  }
}


#############################################################################
# Password Error
#############################################################################
sub error {
  $error = $_[0];
  if ($error eq 'badCombo') {
    &header('Bad Username - Password Combination');
    print " <center>\n";
    print "  <h1>Bad Username - Password Combination</h1>\n";
    print "  <p><hr noshade size=4><p>\n";
    print "  You entered and invalid username password pair.\n";
    print "  <p><hr noshade size=4><p>\n";
    print "  <a href=\"$cgiUrl\?Supervisor\">Try Again</a>\n";
    print " </center>\n\n";
    print " <p><center><font size=1>Online Administrative Feedback Form script created by <a href=\"http://homepages.NYU.EDU/~rw263/\">Randy Jae Weinstein</a></font></center>\n\n";
    print "</body>\n";
    print "</html>\n";

    exit;
  }
  elsif ($error eq 'notSame') {
    &header('Incorrect Password Type-In');
    print " <center>\n";
    print "  <h1>Incorrect Password Type-In</h1>\n";
    print "  <p><hr noshade size=4><p>\n";
    print "  The passwords you typed in for your new password were not the same.<br>\n";
    print "  (NOTE: Passwords must be atleast five character)<br>\n";
    print "  You may have mistyped it.\n";
    print "  <p><hr noshade size=4><p>\n";
    print "  <a href=\"$cgiUrl\?changePassword\">Try Again</a>\n";
    print " </center>\n\n"; 
    print "</body>\n";
    print "</html>\n";

    exit;
  }
  elsif ($error eq 'noAccess') {
    &header('403 Forbidden');
    print " <h1>403 Forbidden</h1>\n";
    print " Your client does not have permission to get URL $ENV{'SCRIPT_NAME'} from this server.\n\n";
    print "</body>\n";
    print "</html>\n";

    exit;
  }
  elsif ($error eq 'mailProg') {
    &header('Mail Program Setup Wrong');
    print " <center>\n";
    print "  <h1>Mail Program Setup Wrong</h1>\n";
    print "  <p><hr noshade size=4><p>\n";
    print "  Please contact <a mailto:\"$recipient\">$recipientName</a> as to what you may have done to cause this error.<br>\n";
    print "  (Error Message: $!)\n";
    print " </center>\n";
    &passwdTrailer;
  }
  elsif ($error eq 'mesgFile') {
    &header('Could Not Open Comment File For Reading');
    print " <center>\n";
    print "  <h1>Could Not Open Comment File For Reading</h1>\n";
    print "  <p><hr noshade size=4><p>\n";
    print "  Could not open the password file for reading!<br>\n";
    print "  (Error Message: $!)\n";
    print " </center>\n";
    &passwdTrailer;
  }
  elsif ($error eq 'AccessFile') {
    &header('Could Not Open Access File For Reading');
    print " <center>\n";
    print "  <h1>Could Not Open Access File For Reading</h1>\n";
    print "  <p><hr noshade size=4><p>\n";
    print "  Could not open the access file for reading!<br>\n";
    print "  (Error Message: $!)\n";
    print " </center>\n";
    &passwdTrailer;
  }
  elsif ($error eq 'noEntryChange') {
    &header('Could Not Open Comment File For Writing');
    print " <center>\n";
    print "  <h1>Could Not Open Comment File For Writing</h1>\n";
    print "  <p><hr noshade size=4><p>\n";
    print "  Could not open the password file for writing!<br>\n";
    print "  Password not changed!<br>\n";
    print "  (Error Message: $!)\n";
    print " </center>\n";
    &passwdTrailer;
  }
  elsif ($error eq 'noPasswdChange') {
    &header('Could Not Open Password File For Writing');
    print " <center>\n";
    print "  <h1>Could Not Open Password File For Writing</h1>\n";
    print "  <p><hr noshade size=4><p>\n";
    print "  Could not open the password file for writing!<br>\n";
    print "  Password not changed!<br>\n";
    print "  (Error Message: $!)\n";
    print " </center>\n";
    &passwdTrailer;
  }

  exit;
}


#############################################################################
# Stuff to print at the end
#############################################################################
sub passwdTrailer {
  print " <p><hr noshade size=4><p>\n";
  print " <center><a href=\"$ENV{'HTTP_REFERER'}\">Try Again</a></center>\n\n";
  print "</body>\n";
  print "</html>\n";

  exit;
}


#############################################################################
# Check the Password
#############################################################################
sub checkPasswd {
  open(MESG,"$mesgFile") || &error(mesgFile);
  @passwdLines = <MESG>;
  close(MESG);

  foreach $line (@passwdLines) {
    if ($line =~ m/<!--Name\/Pwd: (.*):(.*)-->/) { 
      $username = $1;
      $passwd = $2;
    }
  }

  if ($FORM{'USER'} && $FORM{'PWD'}) {
    if (!(($FORM{'PWD'} eq $passwd) && ($FORM{'USER'} eq $username))) {
       &error(badCombo);
    }
  }
  else {
    $testPasswd = crypt($FORM{'password'}, substr($passwd, 0, 2));
    if (!(($testPasswd eq $passwd) && ($FORM{'username'} eq $username))) {
       &error(badCombo);
    }
  }
}


#############################################################################
# Check EMail Subroutine
#############################################################################
sub checkEmail {
  # Initialize local email variable with input to subroutine.
  $email = $_[0];

  # If the e-mail address contains:
  if ($email =~ /(@.*@)|(\.\.)|(@\.)|(\.@)|(^\.)/ ||
      # the e-mail address contains an invalid syntax.  Or, if the
      # syntax does not match the following regular expression pattern
      # it fails basic syntax verification.

      $email !~ /^.+\@(\[?)[a-zA-Z0-9\-\.]+\.([a-zA-Z]{2,3}|[0-9]{1,3})(\]?)$/) {

    # Basic syntax requires:  one or more characters before the @ sign,
    # followed by an optional '[', then any number of letters, numbers,
    # dashes or periods (valid domain/IP characters) ending in a period
    # and then 2 or 3 letters (for domain suffixes) or 1 to 3 numbers
    # (for IP addresses).  An ending bracket is also allowed as it is
    # valid syntax to have an email address like: user@[255.255.255.0]

    # Return a false value, since the e-mail address did not pass valid
    # syntax.
    return 0;
  }

  else {
    # Return a true value, e-mail verification passed.
    return 1;
  }
}

################################ End Of File ################################