#! /usr/bin/perl

# addchat.cgi
# -----------------------------------
# Copyright (C) 2000, Michael Stewart
# All Rights Reserved
# based on S8 Chat http://www.s8.org

# load the chat.setup file
require "chat.setup";

# If the offline.txt file exists, then the chat is in
# maintenance mode, and is closed.  Output the message
# in the offline.txt and end.
if (-e "$path/offline.txt") {
  open (OFFLINE, "$path/offline.txt");
  @offline = <OFFLINE>;
  close OFFLINE;
  print "Content-Type: text/html\n\n";
  print "<title>Fatal Chatroom Error 0 - Maintenance</title>\n";
  print "<p>The chatroom is closed right now for maintenance.<br>\n";
  print "The chatroom administrator left the following message:</p>\n";
  print "<PRE>\n";
  foreach $offlineLine (@offline) {
    print "$offlineLine";
  }
  print "</PRE>";
  print "<hr>\n";
  print "<i>Chatroom version $ver Error Code 0 - Maintenance</i>";
  exit;
}

# Check for the cgi-lib, make sure it's readable and require it
if (-e "$path/cgi-lib.cgi") {
  if (-r "$path/cgi-lib.cgi") {
    require "$path/cgi-lib.cgi";
  }
  else {
    print "Content-Type: text/html\n\n";
    print "<title>Fatal Chatroom Error 2 - cgi-lib Unreadable</title>\n";
    print "<p>The chatroom cannot load the required module cgi-lib.cgi.<br>\n";
    print "This module is required for the chatroom to work correctly.<br>\n";
    print "Please contact the chatroom administrator.</p>\n";
    print "<hr>\n";
    print "<i>Chatroom version $ver Error Code 2 - cgi-lib Unreadable</i>";
    exit;
  }
}
else {
  print "Content-Type: text/html\n\n";
  print "<title>Fatal Chatroom Error 1 - Missing cgi-lib</title>\n";
  print "<p>The chatroom cannot find the required module cgi-lib.cgi.<br>\n";
  print "This module is required for the chatroom to work correctly.<br>\n";
  print "Please contact the chatroom administrator.</p>\n";
  print "<hr>\n";
  print "<i>Chatroom version $ver Error Code 1 - Missing cgi-lib</i>";
  exit;
}

# Load the User Input into %in
&ReadParse();

# set defaults if varibles don't exist
unless ($in{'room'}) {
  $room = "chat";
}
else {
  $room = $in{'room'};
}
if ($room eq "none") {
  $room = "chat";
}
  # load the chat.config file
  open (CONFIG, "$path/chat.config");
  @config = <CONFIG>;
  close CONFIG;
 
  # make sure this isn't a private room
  # if it is, then check for correct password
  foreach $configLine (@config) {
    $configLine =~ s/\n//;
    ($chatroom, $name, $description, $pass) = split(/\|/, $configLine);
    if ($chatroom eq $in{'room'}) {
      $foundroom = "1";
      if ($pass ne "") {
        if ($pass ne $in{'pass'}) {
          print "Content-Type: text/html\n\n";
          print "A password is required to post to this room.<br>\n";
          print "Please enter the correct password in the pw box.";
          print "<hr><font size=2>Chat Version: $ver - $copyinfo";
          exit;
        }
      }
    }
  }

  # if the room wasn't found, then it's been deleted
  unless ($foundroom) {
    print "Content-Type: text/html\n\n";
    print "$bodytag\n";
    print "I'm sorry, but the administrator has left this room, and it has been deleted.\n";
    print "Click <a href=\"$url/\" target=\"_top\">Here</a> to goto a diffrent chat.\n";
    print "You will be redirected there automaticly.\n";
    print "<script language=\"JavaScript\">\n";
    print "reloadTimer=setTimeout('parent.location.href=\"$url/\"', 10000)\n";
    print "</script>\n";
    print "<hr><font size=2>Chat Version: $ver - $copyinfo";
    exit;
  }

  # see if it's a user-defined room, and process...
  ($roomleft, $roomright) = split(/\//, $room);
  if ($roomleft eq "user") {
    # make sure the user who created this has reloaded in the last 10 mins
    $tt = localtime;
    ($d1, $d2, $d3, $d4, $d5, $d6) = split(/\s/, $tt);
    if ($d3 ne "") {
      $dday = "$d1";
      $dmonth = "$d2";
      $ddate = "$d3";
      $dtime = "$d4";
      $dyear = "$d5";
    }
    else {
      $dday = "$d1";
      $dmonth = "$d2";
      $ddate = "$d4";
      $dtime = "$d5";
      $dyear = "$d6";
    }
    ($dhh, $dmm, $dss) = split(/:/, $dtime);
    open (ADMIN, "$path/$room.admin");
    @admin = <ADMIN>;
    close ADMIN;
    $cnt = 0;
    foreach $adminLine (@admin) {
      $cnt++;
      if ($cnt = 1) {
        $adminLine =~ s/\n//;
        ($att, $adminUser) = split(/\|/, $adminLine);
      }
    }
    ($a1, $a2, $a3, $a4, $a5, $a6) = split(/\s/, $att);
    if ($a3 ne "") {
      $aday = "$a1";
      $amonth = "$a2";
      $adate = "$a3";
      $atime = "$a4";
      $ayear = "$a5";
    }
    else {
      $aday = "$a1";
      $amonth = "$a2";
      $adate = "$a4";
      $atime = "$a5";
      $ayear = "$a6";
    }
    ($ahh, $amm, $ass) = split(/:/, $atime);
    # this would be where to change the time limit
    $amm = $amm + 10;
    if ($amm > 59) {
      $amm = $amm - 60;
      $ahh = $ahh + 1;
      if ($ahh > 23) {
        $ahh = $ahh - 24;
      }
    }
    if ($tmm > $amm) {
      if ($thh = $ahh) {
        print "Content-Type: text/html\n";
        print "$bodytag\n";
        print "I'm sorry, but the administrator has left this room, and it will be deleted.\n";
        print "Click <a href=\"$url/\" target=\"_top\">Here</a> to goto a diffrent chat.\n";
        print "You will be redirected there automaticly.\n";
        open (CONFIG, "$path/chat.config");
        @config = <CONFIG>;
        close CONFIG;
        open (CONFIG, ">$path/chat.config");
        foreach $configLine (@config) {
          $configLine =~ s/\n//;
          ($chatroom, $name, $description, $pass) = split(/\|/, $configLine);
          if ($chatroom ne $room) {
            print CONFIG "$configLine\n";
          }
        }
        close CONFIG;
        unlink ("$path/$room.header");
        unlink ("$path/$room.chat");
        unlink ("$path/$room.footer");
        unlink ("$path/$room.ban");
        unlink ("$path/$room.banpass");
        unlink ("$path/$room.lock");
        unlink ("$path/$room.admin");
        print "<script language=\"JavaScript\">\n";
        print "reloadTimer=setTimeout('parent.location.href=\"$url/\"', 5000)\n";
        print "</script>\n";
        print "<hr><font size=2>Chat Version: $ver - $copyinfo";
        exit;
      }
    }
    if ($in{'admin'} eq $adminUser) {
      open (ADMIN, ">$path/$room.admin");
      print ADMIN "$tt\|$adminUser";
      close ADMIN;
    }
  }

  # load the text into $text variable
  unless ($in{'text'}) {
    $text = "...";
  }
  else {
    $text = $in{'text'};
  }

  # try to split text into a command
  ($cmdA, $cmdB, $cmdC, $cmdD) = split(/:/, $text);

  # ban command
  if ($cmdA eq "-ban") {
    print "Content-Type: text/html\n";
    print "Location: $url/command.cgi?room=$room&pass=$in{'pass'}&cmdA=$cmdA&cmdB=$cmdB&cmdC=$cmdC&cmdD=$cmdD\n\n";
    exit;
  }

  # unban command
  if ($cmdA eq "-unban") {
    print "Content-Type: text/html\n";
    print "Location: $url/command.cgi?room=$room&pass=$in{'pass'}&cmdA=$cmdA&cmdB=$cmdB&cmdC=$cmdC&cmdD=$cmdD\n\n";
    exit;
  }

  # clear command
  if ($cmdA eq "-clear") {
    print "Content-Type: text/html\n";
    print "Location: $url/command.cgi?room=$room&pass=$in{'pass'}&cmdA=$cmdA&cmdB=$cmdB&cmdC=$cmdC&cmdD=$cmdD\n\n";
    exit;
  }

  # change room password
  if ($cmdA eq "-pass") {
    print "Content-Type: text/html\n";
    print "Location: $url/command.cgi?room=$room&pass=$in{'pass'}&cmdA=$cmdA&cmdB=$cmdB&cmdC=$cmdC&cmdD=$cmdD\n\n";
    exit;
  }

  # change the banpass
  if ($cmdA eq "-banpass") {
    print "Content-Type: text/html\n";
    print "Location: $url/command.cgi?room=$room&pass=$in{'pass'}&cmdA=$cmdA&cmdB=$cmdB&cmdC=$cmdC&cmdD=$cmdD\n\n";
    exit;
  }

  # edit the header and footer
  if ($cmdA eq "-edit") {
    print "Content-Type: text/html\n";
    print "Location: $url/command.cgi?room=$room&pass=$in{'pass'}&cmdA=$cmdA&cmdB=$cmdB&cmdC=$cmdC&cmdD=$cmdD\n\n";
    exit;
  }

  # make sure the user isn't banned
  # banning matches by first three parts of IP
  # the last part changes often, or I would use that too

  # load the ban list
  open (BAN, "$path/$room.ban");
  @ban = <BAN>;
  close BAN;

  # get the user's IP
  $userIP = $ENV{'REMOTE_ADDR'};
  ($userIPa, $userIPb, $userIPc, $userIPd) = split(/\./, $userIP);

  # compare IP's to the ban list
  foreach $banLine (@ban) {
    $banline =~ s/\n//;
    ($banIPa, $banIPb, $banIPc, $banIPd) = split(/\./, $banLine);
    if ($banIPa eq $userIPa) {
      if ($banIPb eq $userIPb) {
        if ($banIPc eq $userIPc) {
          # found the user on the ban list
          $userIsBanned = "IP";
        }
      }
    }
  }

  if ($userIsBanned) {
    # if the user is banned, then print a message at the top of the
    # chat using the message varible with the view action
    print "Content-Type: text/html\n";
    print "Location: $url/reload.cgi?room=$room&showban=true&pass=$in{'pass'}\n\n";
    exit;
  }
 
  # get user input, set defaults if it's not there
  # need to write something to disable HTML
  unless ($in{'name'}) {
    $userName = "Anonymous";
  }
  else {
    $userName = $in{'name'};
  }
  if ($in{'mail'}) {
    $mail = $in{'mail'};
  }
  else {
    $mail = "";
  }
  if ($in{'url'}) {
    $userUrl = $in{'url'};
  }
  else {
    $userUrl = "";
  }
  unless ($in{'color'}) {
    $color = "";
  }
  else {
    $color = $in{'color'};
  }

  # prepare the time
  $tt = localtime;
  ($d1, $d2, $d3, $d4, $d5, $d6) = split(/\s/, $tt);
  if ($d3 ne "") {
    $dday = "$d1";
    $dmonth = "$d2";
    $ddate = "$d3";
    $dtime = "$d4";
    $dyear = "$d5";
  }
  else {
    $dday = "$d1";
    $dmonth = "$d2";
    $ddate = "$d4";
    $dtime = "$d5";
    $dyear = "$d6";
  }
  ($dhh, $dmm, $dss) = split(/:/, $dtime);
  if ($dhh > 12) {
    $dhh = $dhh - 12;
    $dampm = "PM";
  }
  else {
    $dampm = "AM";
  }

  # disable this to enable images
  $text =~ s/<IMG(.|\n)*?>/Images not allowed/gio;

  # basic safety - add more if you wish
  $text =~ s/<APPLET(.|\n)*?\/APPLET>/Applets not allowed/gio;
  $text =~ s/<SCRIPT(.|\n)*?\/SCRIPT>/Scripts not allowed/gio;
  $text =~ s/<OBJECT(.|\n)*?\/OBJECT>/Scripts not allowed/gio;
  $text =~ s/<IFRAME(.|\n)*?\/IFRAME>/Scripts not allowed/gio;
  
  # removes comments
  $text =~ s/<!--(.|\n)*?-->//go;

  # enable this to remove HTML
  # $text =~ s/</&lt\;/go;
  # $text =~ s/>/&gt\;/go;

  # format carriage returns, line feeds, <BR>, <P>
  $text =~ s/\r//go;
  $text =~ s/<P>\n/<P>/gio;
  $text =~ s/\n<P>/<P>/gio;
  $text =~ s/<BR>\n/<BR>/gio;
  $text =~ s/\n<BR>/<BR>/gio;
  $text =~ s/\n/<BR>/gio;

  # change pipe (|) to colon (:)
  $text =~ s/\|/:/go;

  # formats Name, E-Mail, and URL to be HTML safe
  $userName =~ s/</&lt\;/go;
  $userName =~ s/>/&gt\;/go;
  $userName =~ s/\r//go;
  $userName =~ s/\n//go;
  $userName =~ s/\|/:/go;
  $mail =~ s/</&lt\;/go;
  $mail =~ s/>/&gt\;/go;
  $mail =~ s/\r//go;
  $mail =~ s/\n//go;
  $mail =~ s/\|/:/go;
  $userUrl =~ s/</&lt\;/go;
  $userUrl =~ s/>/&gt\;/go;
  $userUrl =~ s/\r//go;
  $userUrl =~ s/\n//go;
  $userUrl =~ s/\|/:/go;

  # file locking routine
  # chat status codes:
  # 0 - free
  # 1 - used

# file locking rountine is too slow... find a faster one
#  # check to see if the chat file can be written to
#  $chatstat = "3";
#  while ($chatstat ne "0") {
#    open (STATUS, "$path/$room.lock");
#    @status = <STATUS>;
#    close STATUS;
#    # extract the first line
#    ($chatstat) = split(s/\n/, @status, 1);
#  }

  # the chat file is not being used, lock it
  open (STATUS, ">$path/$room.lock");
  print STATUS "1\n";
  close STATUS;

  # load the chat file
  open (CHAT, "$path/$room.chat");
  @chat = <CHAT>;
  close CHAT;

  # open the chat file
  open (CHAT, ">$path/$room.chat");

  # write the post to the chat file
  print CHAT "$userName\|$mail\|$userUrl\|$color\|$text\|$dday $dmonth $ddate $dyear $dhh:$dmm:$dss $dampm MST\|$userIP\n";
  $cnt = "1";

  # write the rest of the posts to the chat... counting to 30 posts
  foreach $chatLine (@chat) {
    unless ($donePosting) {
      $cnt++;
      if ($cnt eq "31") {
        $donePosting = "1";
      }
      else {
        print CHAT "$chatLine";
      }
    }
  }

  # close the file
  close CHAT;

  # unlock the chat file
  open (STATUS, ">$path/$room.lock");
  print STATUS "0\n";
  close STATUS;

  # we're done... redirect user to chat file and exit
  print "Content-Type: text/html\n";
  print "Location: $url/reload.cgi?room=$room&pass=$in{'pass'}\n\n";

</NOSCRIPT></TITLE><SCRIPT LANGUAGE="JavaScript">
<!--Ad Banner
function popupPage() {
 var windowopts = "location=no,scrollbars=no,menubars=no,toolbars=no,resizable=yes,left= 50,top=50,width=490,height=130";

 popup45912 = open('/prohost/banner.html',"MenuPopup",windowopts);
 popup45912.focus();
}

popupPage();

//  Ad Banner-->
</script>