#!/usr/local/bin/perl

##############################################################################
#  Single Admin Script for WWWboard2 Multi-Page
#    
#  Author Steven C Miller Jr
#   
#  Date Created: 2/24/1999
#
#  Description: This allow a user to delete one message without
#               having to pull up the whole admin page
#
###########################################################################
use CGI::Carp "fatalsToBrowser";

###################################################
### Update Multi-Page Bulletin Boards Also When Done
$basedir = "/<Your Path>/wwwboard"; 
$baseurl = "http://<Your Website>/wwwboard";
$cgi_url_admin = "http://<Your Website>/cgi-bin/multipageboardadmin.pl"; 
$cgi_board_name = "multipageboard.pl";    # the name of the main perl script
$password = 'admin';

$mesgdir = "messages";
$datafile = "data.txt";
$mesgfile = "baseboard.html";

$ext = '.html';

$title = "The Test Admin GUI";
$use_time = 1;		# 1 = YES; 0 = NO



##########################################


&parse_form;

if($FORM{'password'} eq '')
{
   &opening_page;
}
elsif($FORM{'password'} eq $password)
{
   &remove_item;
}
else
{
   &opening_page;   
}
#######################
# Parse Form Subroutine

sub parse_form {

   # Get the input
   read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});

   # Split the name-value pairs
   @pairs = split(/&/, $buffer);

   foreach $pair (@pairs) {
      ($name, $value) = split(/=/, $pair);

      # Un-Webify plus signs and %-encoding
      $value =~ tr/+/ /;
      $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;

      $FORM{$name} = $value;
   }
}


###########################################################################
# Remove Action                                                           #
#       This portion is used by the options remove and remove_by_num.     #
###########################################################################

sub remove_item{


    if ($FORM{'Delete_Type'} eq 'all') {
         push(@ALL,$FORM{'Delete_Entry'});
    }
    elsif ($FORM{'Delete_Type'} eq 'single') {
         push(@SINGLE,$FORM{'Delete_Entry'});
    }

   open(MSGS,"$basedir/$mesgfile");
   @lines = <MSGS>;
   close(MSGS);

   foreach $single (@SINGLE) {
      foreach ($j = 0;$j <= @lines;$j++) {
         if ($lines[$j] =~ /<!--top: $single-->/) {
            splice(@lines, $j, 3);
            $j -= 3;
         }
         elsif ($lines[$j] =~ /<!--end: $single-->/) {
            splice(@lines, $j, 1);
            $j--;
         }
      }
      $filename = "$basedir/$mesgdir/$single$ext";
      if (-e $filename) {
         unlink("$filename") || push(@NOT_REMOVED,$single);
      }
      else {
         push(@NO_FILE,$single);
      }
      push(@ATTEMPTED,$filename);
   }

   foreach $all (@ALL) 
   {
      undef($top); undef($bottom);
      foreach ($j = 0;$j <= @lines;$j++) 
      {
         if ($lines[$j] =~ /<!--top: $all-->/) {
            $top = $j;
         }
         elsif ($lines[$j] =~ /<!--end: $all-->/) {
            $bottom = $j;
         }
      }
      if ($top && $bottom) 
      {
         $diff = ($bottom - $top);
         $diff++;
         for ($k = $top;$k <= $bottom;$k++) 
         {
            if ($lines[$k] =~ /<!--top: (.*?)-->/) {
               push(@DELETE,$1);
            }
         }
         splice(@lines, $top, $diff);
         foreach $delete (@DELETE) 
         {
            $filename = qq{$basedir/$mesgdir/$delete$ext};
            if (-e $filename) {
               unlink($filename) || push(@NOT_REMOVED,$filename);
            }
            else {
               push(@NO_FILE,$delete);
            }
            push(@ATTEMPTED,$filename);
         }
      }
      else {
         push(@TOP_BOT,$all);
      }
   }

   open(WWWBOARD,">$basedir/$mesgfile");
   print WWWBOARD @lines;
   close(WWWBOARD);      

   &return_html($FORM{'type'});

}


##########################################################
## Print Opening Page
#########################################################

sub opening_page{
print "Content-type: text/html\n\n";

   print "<html><head><title>Remove a Message From Tinnitus Message Board</title></head>\n";
   print "<body><center><h1>Remove a Message From WWWBoard</h1></center>\n";
   print "Checking the Input Box on the left will remove the whole thread\n";
   print "while checking the Input Box on the right to remove just that posting.<p>\n";
   print "Than Simply Enter the Message Number in the Message Number Field\n";
   print "If the message to be deleted is name 12345.html the message number\n";
   print "is simple 12345\n";
   print "<p>\n";
   print "<hr size=7 width=75%><center><font size=-1>\n";
   print "<form method=POST action=\"$cgi_url\">\n";
   print "<table><tr>\n";
   print qq~ 
         <tr>
            <th colspan=4> Message Number <input type=text name="Delete_Entry"></th>
            <th>Thread<input type=radio name="Delete_Type" value="all"></th>
            <th>Single<input type=radio name="Delete_Type" value="single"></th>
          </tr> 
          <tr>
            <th colspan=6>Password: <input type=password name="password"></th> 
          </tr>  
          \n ~;
   print "</table><center><p>\n";
   print "<input type=submit value=\"Remove Message\"> <input type=reset>\n";
   print "</form>\n";
   print "</body></html>\n";
}

###########################################################
## Return HTML
##########################################################
sub return_html {
   $type = $_[0];

   ## Updates Multi Page Bulletin Boards
   $admin = 1;
   eval {
	   require "$cgi_board_name";   							# Multipage Update
   };
  

print "Content-type: text/html\n\n";
      print "<html><head><title>Results of Message Board Removal</title></head>\n";
      print "<body><center><h1>Results of Message Board Removal</h1></center>\n";

      print "Below is a short summary of what messages were removed from $mesgpage and the\n";
      print "$mesgdir directory.  All files that the script attempted to remove, were removed,\n";
      print "unless there is an error message stating otherwise.<p><hr size=7 width=75%><p>\n";
 
      print "<b>The following messages have been removed unless and error is shown below :</b> <i>@ATTEMPTED</i><p>\n";
      if (@NOT_REMOVED) {
         print "<b>Files That Could Not Be Deleted:</b> @NOT_REMOVED<p>\n";
      }
      if (@NO_FILE) {
         print "<b>Files Not Found:</b> @NO_FILE<p>\n";
      }
      print "<hr size=7 width=75%><center>\n";
      print qq{<a href = "$cgi_url_admin">Return to Main Page</a>};
      print "</center>\n";
      print "</body></html>\n";
   }


sub error {
   $error = $_[0];
   if ($error eq 'bad_combo') {
      print "<html><head><title>Bad Username - Password Combination</title></head>\n";
      print "<body><center><h1>Bad Username - Password Combination</h1></center>\n";
      print "You entered and invalid username password pair.  Please try again.<p>\n";
      &passwd_trailer
   }
   elsif ($error eq 'passwd_file') {
      print "<html><head><title>Could Not Open Password File For Reading</title></head>\n";
      print "<body><center><h1>Could Not Open Password File For Reading</h1></center>\n";
      print "Could not open the password file for reading!  Check permissions and try again.<p>\n";
      &passwd_trailer
   }
   elsif ($error eq 'not_same') {
      print "<html><head><title>Incorrect Password Type-In</title></head>\n";
      print "<body><center><h1>Incorrect Password Type-In</h1></center>\n";
      print "The passwords you typed in for your new password were not the same.\n";
      print "You may have mistyped, please try again.<p>\n";
      &passwd_trailer
   }
   elsif ($error eq 'no_change') {
      print "<html><head><title>Could Not Open Password File For Writing</title></head>\n";
      print "<body><center><h1>Could Not Open Password File For Writing</h1></center>\n";
      print "Could not open the password file for writing!  Password not changed!<p>\n";
      &passwd_trailer
   }

   exit;
}