#! /usr/local/bin/perl

# Guestbook for the World Wide Web
# Created by Matt Wright	Version 2.3.1
# Created: 4/21/95	Last Modified: 6/2/97

# Enhanced by David Efflandt, efflandt@xnet.com
# Added built-in form and test viewing before saving entry
# Used perl date (localtime) and remote host log compatible for more systems
# Weeded out IE <script> tags which hackers abused.
# Created 11/22/95	Last Modified: 7/20/97	beta test version
#############################################################################
# Automatic Variables
$server = "http://$ENV{'SERVER_NAME'}";
$cgiurl = "$ENV{'SCRIPT_NAME'}";

# Set Variables
$guestbookurl = '/~yourname/guestbook.html';
$guestbookreal = '/home/yourname/public_html/guestbook.html';
$guestlog = '/home/yourname/public_html/guestlog.html';

$tz = 'CST';	#  Standard Time zone (set for your time zone)
$dst = 'CDT';	#  Daylight Savings Time zone (use $tz if none)

# Set Your Options:
$mail = 0;		# 1 = Yes; 0 = No
$uselog = 1;	# 1 = Yes; 0 = No
$linkmail = 1;	# 1 = Yes; 0 = No
$separator = 1;	# 1 = <hr>; 0 = <p>
$redirection = 0;	# 1 = Yes; 0 = No
$entry_order = 1;	# 1 = Newest entries added first;
		# 0 = Newest Entries added last.
$remote_mail = 0;	# 1 = Yes; 0 = No
$allow_html = 1;	# 1 = Yes; 0 = No
$line_breaks = 0;	# 1 = Yes; 0 = No

# If you answered 1 to $mail or $remote_mail you will need to fill out
# these variables below:
$mailprog = '/usr/lib/sendmail';
$recipient = 'you@your.com';

# Done
#############################################################################

# Get the Date (strip seconds)
$date = scalar localtime;	# Comment out for perl4
$date =~ s/:\d+ / /;		# Comment out for perl4
($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time);
$min="0"."$min" if ($min<10);
++$mon;
$shortdate = "$mon/$mday/$year $hour:$min";
# $date = $shortdate;		# Uncomment for perl4

# Daylight Savings Time?
if ($isdst) {
   $date .= "$dst";
   $shortdate .= "$dst";
} else {
   $date .= "$tz";
   $shortdate .= "$tz";
}

# GET guest entry form and exit unless POST
&make_form unless ($ENV{'REQUEST_METHOD'} eq "POST");

# Get the input
read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});

# Split the name-value pairs
@pairs = split(/&/, $buffer);

foreach $pair (@pairs) {
   ($name, $value) = split(/=/, $pair);

   # Un-Webify plus signs and %-encoding
   $value =~ tr/+/ /;
   $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
   $value =~ s/<!--(.|\n)*-->//g;
   $value =~ s/<([^>]|\n)*>//g unless ($allow_html = 1);
   $value =~ s/<(.|\n)*script>//gi;	# no scripts

   $FORM{$name} = $value;
}

# Print the Blank Response Subroutines
&no_comments unless $FORM{'comments'};
&no_name unless $FORM{'realname'};

$h_comments = $FORM{'comments'};
$h_comments =~ s/\r\n/<br>\n/g if $line_breaks;

# Print test form and exit if not 'final' submission
if (!$FORM{'final'}) {
   &response;
   exit;
}

# Begin the Editing of the Guestbook File
open (FILE,"$guestbookreal");
@LINES=<FILE>;
close FILE;
$SIZE=@LINES;

# Open Link File to Output
open (GUEST,">$guestbookreal");

for ($i=0;$i<=$SIZE;$i++) {
   $_=$LINES[$i];
   if (/<!--begin-->/) { 

      print GUEST "<!--begin-->\n" if ($entry_order eq '1');
      print GUEST "<b>$h_comments</b><br>\n";

      if ($FORM{'url'}) {
         print GUEST "<a href=\"$FORM{'url'}\">$FORM{'realname'}</a>";
      } else {
         print GUEST "$FORM{'realname'}";
      }

      if ( $FORM{'username'} ){
         if ($linkmail eq '1') {
            print GUEST " \&lt;<a href=\"mailto:$FORM{'username'}\">";
            print GUEST "$FORM{'username'}</a>\&gt;";
         } else {
            print GUEST " &lt;$FORM{'username'}&gt;";
         }
      }

      print GUEST "<br>\n";
      print GUEST "$FORM{'city'}," if $FORM{'city'};
      print GUEST " $FORM{'state'}" if $FORM{'state'};
      print GUEST " $FORM{'country'}" if $FORM{'country'};

      if ($separator eq '1') {
         print GUEST " - $date<hr>\n\n";
      } else {
         print GUEST " - $date<p>\n\n";
      }

      print GUEST "<!--begin-->\n" if ($entry_order eq '0');

   } else {
      print GUEST $_;
   }
}
close GUEST;

# Resolve remote host for servers that don't
$ip_address = $ENV{'REMOTE_ADDR'};
@numbers = split(/\./, $ip_address);
$ip_number = pack("C4", @numbers);
($host) = (gethostbyaddr($ip_number, 2))[0];
$host = $ip_address unless $host;

# Log The Entry
&log('entry') if ($uselog eq '1');

#########
# Options

# Mail Option
if ($mail eq '1') {
   open (MAIL, "|$mailprog $recipient") || die "Can't open $mailprog!\n";

   print MAIL "Reply-to: $FORM{'username'} ($FORM{'realname'})\n";
   print MAIL "From: $FORM{'username'} ($FORM{'realname'})\n";
   print MAIL "Subject: Entry to Guestbook\n\n";
   print MAIL "You have a new entry in your guestbook:\n", ("-" x 55), "\n";
   print MAIL "$FORM{'comments'}\n$FORM{'realname'}";
   print MAIL " <$FORM{'username'}>" if ( $FORM{'username'} );
   print MAIL "\nURL:  $FORM{'url'}" if $FORM{'url'};
   print MAIL "\n";
   print MAIL "$FORM{'city'}," if $FORM{'city'};
   print MAIL " $FORM{'state'}" if $FORM{'state'};
   print MAIL " $FORM{'country'}" if $FORM{'country'};
   print MAIL " - $date\n", ('-' x 55), "\n";
   print MAIL "$ENV{'HTTP_USER_AGENT'}\n", "$host\n";
   close MAIL;
}

if ($remote_mail eq '1' && $FORM{'username'}) {
   open (MAIL, "|$mailprog -t") || die "Can't open $mailprog!\n";

   print MAIL "To: $FORM{'username'}\n";
   print MAIL "From: $recipient\n";
   print MAIL "Subject: Entry to Guestbook\n\n";
   print MAIL "Thank you for adding to my guestbook.\n", ("-" x 55), "\n";
   print MAIL "$FORM{'comments'}\n$FORM{'realname'}";
   print MAIL " <$FORM{'username'}>" if $FORM{'username'};
   print MAIL "\nURL:  $FORM{'url'}" if $FORM{'url'};
   print MAIL "\n";
   print MAIL "$FORM{'city'}," if $FORM{'city'};
   print MAIL " $FORM{'state'}" if $FORM{'state'};
   print MAIL " $FORM{'country'}" if $FORM{'country'};
   print MAIL " - $date\n", "$host\n", ('-' x 55), "\n";
   close MAIL;
}

# Print final entry
&response;

#######################
# Subroutines

sub begin_html {
   local ($title) = @_;
   print "Content-type: text/html\n\n";
   print "<html><head><title>$title</title></head>";
   print qq(<body>\n);	# bgcolor or background in this tag
}

sub form_body {
   print <<FORM;
<form method=POST action="$cgiurl">
Your Name: <input type=text name="realname" 
size=30 value="$FORM{'realname'}"><br>
E-Mail: <input type=text name="username" value="$FORM{'username'}" size=40><br>
URL: <input type=text name="url" value="$FORM{'url'}" size=50><br>
City: <input type=text name="city" value="$FORM{'city'}" size=15>, 
State: <input type=text name="state" value="$FORM{'state'}" size=15> 
Country: <input type=text name="country" value="$FORM{'country'}" size=15>
<p>Comments:<br>
<textarea name="comments" ROWS=5 COLS=65>$FORM{'comments'}</textarea><p>
Test Entry to see what your entry will look like. 
Final Entry submits to guestbook.<p>
<input type=submit name="prelim" value="Test Entry"> * 
<input type=submit name="final" value="Final Entry"> * <input type=reset>
</form><hr>Return to the <a href="$guestbookurl">Guestbook</a>.
</body></html>
FORM
}

sub make_form {
   &begin_html("Guest Entry");
   print "<center><h1>Add to My Guestbook</h1></center>\n";
   print "Fill in the blanks below to add to my guestbook. \nThe only blanks ";
   print "that you have to fill in are the comments and name section. \n";
   print "You may use html tags in comments. " if $allow_html;
   print "&lt;script&gt; tags not accepted due to hackers.  ";
   print "Thanks!<hr>\n";
   &form_body;
   exit;
}

# Print Out Initial Output Location Heading
sub response {
   if ($FORM{'final'} && $redirection eq '1') {
      print "Location: $server$guestbookurl\n\n";
   } else { 
      &no_redirection;
   }
}

sub no_comments {
   &begin_html("No Comments");
   print "<center><h1>Your Comments appear to be blank</h1></center>\n";
   print "The comment section in the guestbook fillout form appears to be blank and therefore ";
   print "the Guestbook Addition was not added.  Please enter your comments below.<p>";
   &form_body;

   # Log The Error
   &log('no_comments') if ($uselog eq '1');
   exit;
}

sub no_name {
   &begin_html("No Name");
   print "<center><h1>Your Name appears to be blank</h1></center>\nThe Name Section ";
   print "in the guestbook fillout form appears to be blank \nand therefore your entry to the ";
   print "guestbook was not added. \n Please add your name in the blank below.<p>\n";
   &form_body;

   # Log The Error
   &log('no_name') if ($uselog eq '1');
   exit;
}

# Log the Entry or Error
sub log {
   ($log_type) = @_;

   open (LOG, ">>$guestlog");
   print LOG "$host - [$shortdate]<br>\n" if ($log_type eq 'entry');
   print LOG "$host - [$shortdate] - ERR: No Name<br>\n" if ($log_type eq 'no_name');
   print LOG "$host - [$shortdate] - ERR: No Comments<br>\n" if ($log_type eq 'no_comments');
}

# Redirection Option
sub no_redirection {

   # Print Response
   &begin_html("Thank You");
   if ($FORM{'final'}) {
      print "<center><h1>Thank You For Signing The Guestbook</h1></center>\n";
      print "Thank you for filling in the guestbook form. \n";
      print "Your entry has been added to the guestbook.<hr>\n";
   } else {
      print "<center><h1>This Is How It Will Look</h1></center>\n";
      print "This is you entry as it will appear in my guestbook. \n";
      print "If this is acceptible then press the Final Entry button. \n";
      print "If not, then revise the form below and Test again.<hr>\n";
   }
   print "Here is what you submitted:<p>\n<b>$h_comments</b><br>\n";

   if ($FORM{'url'}) {
      print "<a href=\"$FORM{'url'}\">$FORM{'realname'}</a>";
   } else {
      print "$FORM{'realname'}";
   }

   if ( $FORM{'username'} ){
      if ($linkmail eq '1') {
         print " &lt;<a href=\"mailto:$FORM{'username'}\">";
         print "$FORM{'username'}</a>&gt;";
      } else {
         print " &lt;$FORM{'username'}&gt;";
      }
   }
   print "<br>\n";
   print "$FORM{'city'}," if ( $FORM{'city'} );
   print " $FORM{'state'}" if ( $FORM{'state'} );
   print " $FORM{'country'}" if ( $FORM{'country'} );
   print " - $date<p><hr>\n";

   # Print End of HTML
   if ($FORM{'final'}) {
      print "Return to the <a href=\"$guestbookurl\">Guestbook</a>.<br>Reload the ";
      print "guestbook page if you do not see your entry.</body></html>\n";
   } else {
      &form_body;
   }
   exit;
}