#!/usr/local/bin/perl

# 上記は、使用するサ−バ−のパスにあわせる事。



#-----------------------------------------------------

#            Guest book Ver. 2

#-----------------------------------------------------



# ---------- ココから下を変更して下さい。-------------



# デザインのテンプレートHTMLファイル名。

$template_file = './guest_book.html';



# 投稿内容のログファイル名。

$log_file = './log.dat';



# 管理者パスワード。必ず変更して下さい。

$master_passwd = 'coffee';



# 1画面に表示するスレット数。

$pages = 10;



# 1メッセージの文字数制限値。0なら制限なし。

$max_len = 2000;



# このCGIのURL。

# フルパスで指定する場合はhttp://から正しく記述する。

# 例: $cgi_url = 'http://www.lens.gr.jp/~html/cgi-bin/board.cgi'

$cgi_url = 'http://www.q-michinoeki.net/cgi/bbs/board.cgi';



# 削除ボタンのラベル。

$delete_label = '削除';



# 返信ボタンのラベル。

$reply_label = '返信';



# 返信フォーム画面のタイトル。

# $reply_title1はメッセージ番号の前、$reply_title2は後に表示される。

$reply_title1 = '<font size="4">Message No. ';

$reply_title2 = 'への返信</font>';



# 次ページ表示ボタンのラベル。

$next_label = '次のページ';



# name欄への入力が無かった場合のデフォルト。

$nanashi_label = '匿名希望';



# name表示色

$name_color = '#FF3300';



# subject欄への入力が無かった場合のデフォルト。

$no_subject = 'タイトルなし';



# subject表示色

$subject_color = '#FF9900';



# blood欄への入力が無かった場合のデフォルト。

$no_blood = '一般';



# 曜日名の表現

@wday_array = ('Sun', 'Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat');



# ---------- ココまで！！ ----------------------------



require './jcode.pl';



&GetQuery;

if ($FORM{'mode'} eq "Write") {

	$date = &GetDates;

	&WriteData;

	&PrintData;

} elsif ($FORM{'mode'} eq "Delete") {

	&DeleteData;

	&PrintData;

} elsif ($FORM{'mode'} eq "WriteRes") {

	&PrintResForm;

} else {

	&PrintData;

}

exit;



sub GetDates {

	my $times = time;

	my ($sec, $min, $hour, $mday, $month, $year, $wday, $yday, $isdst) = localtime($times);

	$min = "0$min" if ($min < 10);

	$hour = "0$hour" if ($hour < 10);

	$mday = "0$mday" if ($mday < 10);

	$month = $month + 1;

	$month = "0$month" if ($month < 10);

	$year = $year + 1900;

	my $youbi = $wday_array [$wday];



	return "$year/$month/$mday($youbi) $hour:$min";

}



sub GetQuery {

	my (@pairs, $buffer, $pro);



	read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});

	@pairs = split(/&/, $buffer);

	foreach $pair (@pairs) {

		($name, $value) = split(/=/, $pair);

		$value =~ tr/+/ /;

		$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;

		&jcode'convert(*value, 'sjis');

		$value =~ s/\t/ /g;

		$value =~ s/\r/\n/g;

		$value =~ s/\n\n/\n/g;

		$value =~ s/\n/<br>/g;

		$FORM{$name} = $value;

	}



	

}



sub WriteData {

	$org_number = $FORM{'org_number'};



	$host = $FORM{'host'};

	if ($FORM{'password'} eq "") {

		$password = &encrypt($master_passwd);

	} else {

		$password = &encrypt($FORM{'password'});

	}

	$name = $FORM{'name'};

	$name =~ s/ //g;

	$name =~ s/　//g;

	$name =~ s/</&lt;/g;	

	$name =~ s/>/&gt;/g;	

	$name = $nanashi_label if (!$name);



	$email = $FORM{'email'};



	$blood = $FORM{'blood'};

	$blood =~ s/</&lt;/g;

	$blood =~ s/>/&gt;/g;	

	$blood = $no_blood if (!$blood);



	$url = $FORM{'url'};

	$url ="" if ($url eq "http://");



	$subject = $FORM{'subject'};

	$subject =~ s/</&lt;/g;

	$subject =~ s/>/&gt;/g;	

	$subject = $no_subject if (!$subject);



	$board = $FORM{'board'};

	if (length($board) > $max_len && $max_len != 0) {

		$max_moji = $max_len/2;

		&error("$max_moji文字以内で書き込んで下さい。");

	}

	

	$board =~ s/<pre//ig;

	$board =~ s/<meta//ig;

	$board =~ s/<body//ig;

	$board =~ s/<applet//ig;

	$board =~ s/<script//ig;

	$board =~ s/<.*width//ig;

	$board =~ s/<noscript//ig;

	$board =~ s/<embed//ig;

	$board =~ s/<.*hight//ig;

	$board =~ s/<title//ig;

	$board =~ s/<!--//ig;

	$board =~ s/<.*mailbox://ig;

	$board =~ s/<.*img.*\?//ig;

	

	@tags = split(/</, $board);

	$dmy = shift(@tags);

	foreach $tag (@tags) {

		$tag =~ s/([^>]*)>(.*)/$1/;

		$tag =~ s/^\/(.*)//;

		$tag =~ s/^([^\s]*).*/$1/;

	}

	$board .= '>' if ($board =~ /<\/$/);

	@tags = reverse(@tags);

	foreach $tag (@tags) {

		next if ($tag =~ /(img|^hr$|^br$)/i);

		$board .= "</$tag>" if ($tag);

	}

	$board .= '">TagError?</A>' if (($board =~ /<A.*HREF/i) && !($board =~ /<A.*".*".*>.*<\/A>/i));

	$board =~ s/<a href=/<A target="_blank" href=/ig;

	$board =~ s/<.*(img|href).*on.*=/TagError?/ig;



	if ($board) {

		@lines = ();

		open(LOG, "$log_file") || &error("Can't Open Log File.");

		seek(LOG, 0, 0);

		@lines = <LOG>;

		close(LOG);

	

		if (@lines <= 1) { @lines = (); }

	

		$counter = shift(@lines);

		if ($counter eq "") { $counter = 0; }

		$counter = $counter + 1;

	

		@newlines = ();

	

		if ($org_number eq "") {

			unshift(@lines, "$counter\t0\t$date\t$host\t$password\t$name\t$email\t$blood\t$url\t$subject\t$board\n");

			@newlines = @lines;

		} else {

			$mode = 0;

			foreach (@lines) {

				($number, $resnum) = split(/\t/);

				if ($mode == 0 && $number == $org_number) {

					$mode = 1;

				} elsif ($mode == 1 && $resnum == 0) {

					push(@newlines, "$counter\t$org_number\t$date\t$host\t$password\t$name\t$email\t$blood\t$url\t$subject\t$board\n");

					$mode = 2;

				}

				push(@newlines, $_);

			}

			if ($mode == 1) {

				push(@newlines, "$counter\t$org_number\t$date\t$host\t$password\t$name\t$email\t$blood\t$url\t$subject\t$board\n");

			}

		}

	

		unshift(@newlines, "$counter\n");

		open(LOG, ">$log_file") || &error("Can't Write Log File.");

		&lock;

		seek(LOG, 0, 0);

		print LOG @newlines;

		&unlock;

		close(LOG);

	}

}



sub DeleteData {

	if ($FORM{'number'} ne "" && $FORM{'password'} ne "") {



		@lines = ();

		open(LOG, "$log_file") || &error("Can't Open Log File.");

		seek(LOG, 0, 0);

		@lines = <LOG>;

		close(LOG);



		$counter = shift(@lines);

		if ($counter eq "") { $counter = 0; }



		$mode = 0;

		foreach (@lines) {

			($number, $org_number, $date, $host, $password) = split(/\t/);

			if ($mode == 0 && $number == $FORM{'number'}) {

				$org_password = $password;

				if ($org_number == 0) {

					$mode = 2;

				} else {

					$mode = 1;

				}

			} elsif ($mode == 2 && $org_number == $FORM{'number'}) {

				next;

			} else {

				push(@newlines, $_);

			}

		}



		if ($mode != 0 && (&checkpass($FORM{'password'}, $org_password) eq 'Ok' || $FORM{'password'} eq $master_passwd)) {

			unshift(@newlines, $counter);

			open(LOG, ">$log_file") || &error("Can't Write Log File.");

			&lock;

			seek(LOG, 0, 0);

			print LOG @newlines;

			&unlock;

			close(LOG);

		}

	}

}



sub PrintData {

	open(ENT, "$template_file") || &error("Can't Read HTML Skeleton File");

	seek(ENT, 0, 0);

	@enter = <ENT>;

	close(ENT);



	open(LOG, "$log_file") || &error("Can't Open Log File.");

	seek(LOG, 0, 0);



	print "Content-type: text/html\n\n";



	foreach (@enter) {

		s/\r/\n/g;

		s/\n\n/\n/g;

		push @html, split(/\n/);

	}

	$progress = 'START';



	foreach (@html) {

		if (/<!-- MESSAGE AREA END -->/) {

			print "$_\n";

			$progress = 'MESSAGE END';

		} elsif ($progress eq 'MESSAGE') {

			next;

		} elsif (/<!-- MESSAGE AREA START -->/) {

			print "$_\n";



			$progress = 'MESSAGE';

			$counter = <LOG>;



			$page = $FORM{'page'};

			if ($page eq "") {

				$page = 1;

			} 

			$start = (($page - 1) * $pages) + 1;

			

			$count = 0;

			while (<LOG>) {

				chop($_);

				($number, $org_number, $date, $host, $password, $name, $email, $blood, $url, $subject, $board) = split(/\t/);

				if ($org_number == 0) { $count++; }

				if ($count >= $start && $count < ($start + $pages)) {

					if ($email =~ /([\w\-]+)@(.+)\.(.+)/) {

						$name_usr = "<A HREF=\"mailto:$email\">$name</A>";

					} else {

						$board =~ s/\t/&lt;/g; 

						$name_usr = "$name";

					}

					if ($url) {

						$data_usr = "[$date]($host)<BR><A HREF=\"$url\">$url</A>";

					} else {

						$data_usr = "[$date]($host)";

					}

					if ($org_number == 0) {

						print "<HR>\n";

						print "<table border=\"0\" width=\"95%\" align=\"center\"><tr>\n";

						print "  <form action=\"$cgi_url\" method=\"POST\">\n";

						print "  <input type=\"hidden\" name=\"mode\" value=\"WriteRes\">\n";

						print "  <input type=\"hidden\" name=\"org_number\" value=\"$number\">\n";

						print "  <input type=\"hidden\" name=\"page\" value=\"$page\">\n";

						print "  <td valign=\"top\" nowrap><font size=\"2\">No. $number</font> <b><FONT SIZE=\"2\" COLOR=\"$subject_color\">$subject</FONT><FONT SIZE=\"2\" COLOR=\"$name_color\"> : </FONT></b><b><FONT SIZE=\"2\" COLOR=\"$name_color\">$name_usr</FONT></b><FONT SIZE=\"2\" COLOR=\"#C2C2C2\">（</FONT><FONT SIZE=\"2\" COLOR=\"#C2C2C2\">$blood</FONT><FONT SIZE=\"2\" COLOR=\"#C2C2C2\">）</FONT><font size=\"2\">:</font>\n";

						print "  <input type=\"submit\" value=\"$reply_label\"></td></form>\n";

						print "</tr></table>\n";

						print "<table border=\"0\" width=\"95%\" align=\"center\"><tr>\n";

						print "  <td><UL><FONT SIZE=\"1\">$board</FONT></UL><FONT COLOR=\"#888888\" SIZE=\"2\"><DIV ALIGN=right>$data_usr</DIV></FONT></td>\n";

						print "</tr></table>\n";

					} else {

						print "<HR width=\"90%\"align=\"right\" >\n";

						print "<table border=\"0\" width=\"95%\" align=\"center\"><tr>\n";

						print "  <td width=\"10%\"><br></td>\n";

						print "  <td valign=\"top\" nowrap><font size=\"2\">No. $number</font> <b><FONT SIZE=\"2\" COLOR=\"$subject_color\">$subject</FONT><FONT SIZE=\"2\" COLOR=\"$name_color\"> : </FONT></b><b><FONT SIZE=\"2\" COLOR=\"$name_color\">$name_usr</FONT></b><FONT SIZE=\"2\" COLOR=\"#C2C2C2\">（</FONT><FONT SIZE=\"2\" COLOR=\"#C2C2C2\">$blood</FONT><FONT SIZE=\"2\" COLOR=\"#C2C2C2\">）</FONT><font size=\"2\">:</font></td>\n";

						print "</tr></table>\n";

						print "<table border=\"0\" width=\"95%\" align=\"center\"><tr>\n";

						print "  <td width=\"10%\"><br></td>\n";

						print "  <td><UL><FONT SIZE=\"1\">$board</FONT></UL><FONT COLOR=\"#888888\" SIZE=\"2\"><DIV ALIGN=right>$data_usr</DIV></FONT></td>\n";

						print "</tr></table>\n";

					}

				}

			}



			print "<HR>\n";

			print "<table border=\"0\" width=\"95%\" align=\"center\"><tr>\n";

			print "  <td align=\"right\"><form action=\"$cgi_url\" method=\"POST\">\n";

			print "  <input type=\"hidden\" name=\"mode\" value=\"Delete\">\n";

			print "  <input type=\"hidden\" name=\"page\" value=\"$page\">\n";

			print "  Message No. <input type=\"text\" name=\"number\" size=\"5\">\n";

			print "  Password <input type=\"password\" name=\"password\" size=\"8\" maxlength=\"8\">\n";

			print "  <input type=\"submit\" value=\"$delete_label\"></td></form>\n";

			print "</tr></table>\n";

		

			if ($count >= ($start + $pages)) {

				$next_page = $page + 1;

				print "<table border=\"0\" width=\"95%\" align=\"center\"><tr>\n";

				print "  <td align=\"center\"><form action=\"$cgi_url\" method=\"POST\">\n";

				print "  <input type=\"hidden\" name=\"page\" value=\"$next_page\">\n";

				print "  <input type=\"submit\" value=\"$next_label\"></td></form>\n";

				print "</tr></table>\n";

			}

		} else {

			print "$_\n";

		}

	}



	close(LOG);

}



sub PrintResForm {

	open(ENT, "$template_file") || &error("Can't Read HTML Skeleton File");

	seek(ENT, 0, 0);

	@enter = <ENT>;

	close(ENT);



	open(LOG, "$log_file") || &error("Can't Open Log File.");

	seek(LOG, 0, 0);



	foreach (@enter) {

		s/\r/\n/g;

		s/\n\n/\n/g;

		push @html, split(/\n/);

	}



	print "Content-type: text/html\n\n";

	$progress = 'START';

	foreach (@html) {

		if (/<!-- MESSAGE AREA END -->/) {

			print "$_\n";

			$progress = 'MESSAGE END';

		} elsif ($progress eq 'MESSAGE') {

			next;

		} elsif (/<!-- FORM AREA START -->/) {

			print "$_\n";

			print "<table border=\"0\" align=\"center\"><tr>\n";

			print "  <td>$reply_title1$FORM{'org_number'}$reply_title2</td>\n";

			print "</tr></table>\n";

		} elsif (/<!-- INSERT OPTIONAL HIDDEN VALUE -->/) {

			print "$_\n";

			print "<INPUT TYPE=\"hidden\" NAME=\"org_number\" value=\"$FORM{'org_number'}\">\n";

			print "<INPUT TYPE=\"hidden\" NAME=\"page\" value=\"$FORM{'page'}\">\n";

		} elsif (/<!-- MESSAGE AREA START -->/) {

			print "$_\n";



			$progress = 'MESSAGE';

			$counter = <LOG>;

		

			while (<LOG>) {

				chop($_);

				($number, $org_number, $date, $host, $password, $name, $email, $blood, $url, $subject, $board) = split(/\t/);

				if ($number == $FORM{'org_number'} || $org_number == $FORM{'org_number'}) {

					if ($email =~ /([\w\-]+)@(.+)\.(.+)/) {

						$name_usr = "<A HREF=\"mailto:$email\">$name</A>";

					} else {

						$board =~ s/\t/&lt;/g; 

						$name_usr = "$name";

					}

					if ($url) {

						$data_usr = "[$date]($host)<BR><A HREF=\"$url\">$url</A>";

					} else {

						$data_usr = "[$date]($host)";

					}

					if ($org_number == 0) {

						print "<HR>\n";

						print "<table border=\"0\" width=\"95%\" align=\"center\"><tr>\n";

						print "  <td valign=\"top\" nowrap><font size=\"2\">No. $number</font> <b><FONT SIZE=\"2\" COLOR=\"$subject_color\">$subject</FONT><FONT SIZE=\"2\" COLOR=\"$name_color\"> : </FONT></b><b><FONT SIZE=\"2\" COLOR=\"$name_color\">$name_usr</FONT></b><FONT SIZE=\"2\" COLOR=\"#C2C2C2\">（</FONT><FONT SIZE=\"2\" COLOR=\"#C2C2C2\">$blood</FONT><FONT SIZE=\"2\" COLOR=\"#C2C2C2\">）</FONT><font size=\"2\">:</font>\n";

						print "</tr></table>\n";

						print "<table border=\"0\" width=\"95%\" align=\"center\"><tr>\n";

						print "  <td><UL><FONT SIZE=\"1\">$board</FONT></UL><FONT COLOR=\"#888888\" SIZE=\"2\"><DIV ALIGN=right>$data_usr</DIV></FONT></td>\n";

						print "</tr></table>\n";

					} else {

						print "<HR width=\"90%\"align=\"right\">\n";

						print "<table border=\"0\" width=\"95%\" align=\"center\"><tr>\n";

						print "  <td width=\"10%\"><br></td>\n";

						print "  <td valign=\"top\" nowrap><font size=\"2\">No. $number</font> <b><FONT SIZE=\"2\" COLOR=\"$subject_color\">$subject</FONT><FONT SIZE=\"2\" COLOR=\"$name_color\"> : </FONT></b><b><FONT SIZE=\"2\" COLOR=\"$name_color\">$name_usr</FONT></b><FONT SIZE=\"2\" COLOR=\"#C2C2C2\">（</FONT><FONT SIZE=\"2\" COLOR=\"#C2C2C2\">$blood</FONT><FONT SIZE=\"2\" COLOR=\"#C2C2C2\">）</FONT><font size=\"2\">:</font></td>\n";

						print "</tr></table>\n";

						print "<table border=\"0\" width=\"95%\" align=\"center\"><tr>\n";

						print "  <td width=\"10%\"><br></td>\n";

						print "  <td><UL><FONT SIZE=\"1\">$board</FONT></UL><FONT COLOR=\"#888888\" SIZE=\"2\"><DIV ALIGN=right>$data_usr</DIV></FONT></td>\n";

						print "</tr></table>\n";

					}

				}

			}

			print "<HR>\n";

		}  else {

			print "$_\n";

		}

	}



	close(LOG);

}



sub encrypt {

	my $plain = shift(@_);

	my (@salts, $salt, $crypted);



	@salts = ('a'..'z', 'A'..'Z', '0'..'9', '.', '/');

	srand(time ^ $$);

	$salt = $salts[int(rand(@salts))] . $salts[int(rand(@salts))];

	$crypted = crypt($plain, $salt);



	return $crypted;

}



sub checkpass {

	my ($inputpass, $logpass) = @_;

	my $salt;



	$salt = substr($logpass, 0, 2);

	if (crypt($inputpass, $salt) eq $logpass) {

		return 'Ok';

	} else {

		return 'No';

	}

}



sub lock {

	my $retry = 5;

	my $symlink_check = (eval { symlink("",""); }, $@ eq "");



	if (-e "$log_file.lock") {

		($mtime) = (stat("$log_file.lock"))[9];

		if ($mtime < time - 180) {

			unlink("$log_file.lock");

		}

	}



	if (!$symlink_check) {

		while(-f "$log_file.lock") {

			if (--$retry <= 0) { &error("System is busy. Please Retry."); }

			sleep(1);

		}

		open(LOCK,">$log_file.lock");

		close(LOCK);

	} else {

		while (!symlink(".", "$log_file.lock")) {

			if (--$retry <= 0) { &error("System is busy. Please Retry."); }

			sleep(1);

		}

	}

}



sub unlock {

	unlink("$log_file.lock");

}



sub error {

	if (-e "$log_file.lock") {

		unlink("$log_file.lock");

	}



	print "Content-type: text/html\n\n";

	print "<html>\n";

	print "<head>\n";

	print "<title>ERROR</title>\n";

	print "</head>\n";

	print "<body>\n";

	print "<center><hr width=\"90%\">\n";

	print "<h3>ERROR !</h3>\n";

	print "<h2>$_[0]</h2>\n";

	print "<hr width=\"90%\"></center>\n";

	print "</body></html>\n";

	exit;

}