#! /usr/bin/perl
#This file password protects the chat room, using board accounts.

require '/var/www/vhosts/uhnd.com/httpdocs/board/cookie.pl';

$valid_passwords = "members";
$basedir = "/var/www/vhosts/uhnd.com/httpdocs/board";
$errormsg = '';

# Verify that the user's login information is correct.  If it is,
# set cookie.  Otherwise, bring login screen back up.


# Verify login info.
if ($ENV{QUERY_STRING} eq 'login') {
      ReadParse(*FORM);

      if (!defined $FORM{'username'} || !defined $FORM{'password'}) {
         $errormsg = '<p align="center"><font face="verdana" size="2" color="red">Login failed!</font></p>';
         &login;
      }
      if (!(-e "$basedir/$valid_passwords/$FORM{'username'}")) {
          $errormsg = '<p align="center"><font face="verdana" size="2" color="red">Login failed!</font></p>';         
          &login;
      }
      open(FILE, "$basedir/$valid_passwords/$FORM{'username'}") or &login;
      $password = <FILE>;
      chomp $password;
      if($FORM{'password'} eq "$password") {
         $validation = "$FORM{'username'}" . '&' . "$FORM{'password'}";
	 &set_cookie('validation', $validation, '', '/', 'www.uhnd.com');
	 &set_cookie('validation', $validation, '', '/', 'uhnd.com');
         &load_chat;
      }
      else {
         $errormsg = '<p align="center"><font face="verdana" size="2" color="red">Login failed!</font></p>'; 
         &login; 
      }
}

#START HERE.  When the chat page loads, check if a cookie exists.  If not, bring up login screen.
if (&get_cookie('validation') ne '') {
   @validation = split(/&/, &get_cookie('validation'));
      if (!(-e "$basedir/$valid_passwords/$validation[0]")) {
          &login;
      } else {
         &load_chat;
      }
} else {
   &login;
}



#Subroutine to load chat room
sub load_chat {
print "Content-type: text/html\n\n";
print <<'ENCODING';
<p align="center"><strong><font face="Verdana" size="2">The chat room is always open, and now available to board members only.
&nbsp; </font></p>
</strong>
<p align="center"><font face="Verdana" size="2">We no longer organize chats, but you may post on the football board to
gather other members.  Or try checking in on gamedays.&nbsp; Use the &quot;float&quot; button to maximize the room.
&nbsp; More instructions below.</font></p>
<div align="center"><center>
<table border="2" bgcolor="#000080" bordercolor="#000080" cellpadding="0"
cellspacing="0">
<tr>
<td>
<!-- Begin ParaChat -->
<applet codebase="http://www.parachatfree.com/pchat/chatfree/classes"
archive=pchat.zip code=ParaChat.class HEIGHT=350 WIDTH=600>
<param name="ServerPort" value="9301">
<param name="Channel" value="#UHND.com">
Sorry, but your browser is not Java enabled, and you will not be able to chat
</applet>
<!-- End ParaChat -->
</td>
</tr>
</table>
<p align="center"><font face="Verdana" size="2">To enter the chat room, enter a username and click &quot;Ok,
connect&quot;. The other fields are optional.<br>
<br>
Once inside the chat, you can ignore a user by highlighting their username (on the left), and then clicking the &quot;<strong>ignore</strong>&quot; box.&nbsp; Highlighting a username and then clicking
&quot;<strong>Private Chat</strong>&quot; will allow you to chat separately with anyone else in the room (similar to an instant message).&nbsp; </p>
<p align="center">For more available user commands see the <a
href="http://parachat.com/usercmds.htm">parachat FAQ page</a>.</p>
<p align="center">Email questions to: <a href="http://www.uhnd.com/mail/mail.php">Contacts</a></font></p>
ENCODING
exit;
}


#subroutine to load login screen
sub login {
   print "Content-type: text/html\n\n";
print $errormsg;
print <<'ENCODING';
<p align="center"><u><font face="Verdana" size="4">The UHND.com Chat Room</font></u></p>
<p align="center"><font face="Verdana" size="2">Please login using your member information at this time:</font></p>
<div align="center"><center>
<form action="chat.cgi?login" method="POST">
<table border="0" width="250">
<tr>
<td width="50%"><font face="Verdana" size="2"><strong>Username:</strong></font></td>
<td width="50%"><font face="Verdana" size="2"><input type="text" name="username" size="25"></font></td>
</tr>
<tr>
<td width="50%"><font face="Verdana" size="2"><strong>Password:</strong></font></td>
<td width="50%"><font face="Verdana" size="2"><input type="text" name="password" size="25"></font></td>
</tr>
</table>
<input type="submit" value="Login">
</form>
</center></div>
<hr size="1" color="navy">
<p align="center"><font face="Verdana" size="2"><a href="http://www.uhnd.com/mail/mail.php">Contacts</a></font></p>
ENCODING
exit;
}


#Error message would go here.
sub trojan_error {
print "Content-type: text/html\n\n";
print "hello3";
exit;
}

#parse form
sub ReadParse {
	local (*in) = @_ if @_;
	local ($i, $key, $val);
    
	if ( $ENV{'REQUEST_METHOD'} eq "GET" ) {
		$in = $ENV{'QUERY_STRING'};
	} elsif ($ENV{'REQUEST_METHOD'} eq "POST") {
		read(STDIN,$in,$ENV{'CONTENT_LENGTH'});
	} else {
		$in = ( grep( !/^-/, @ARGV )) [0];
		$in =~ s/\\&/&/g;
	}
	@in = split(/&/,$in);
	foreach $i (0 .. $#in) {
		# Convert plus's to spaces
		$in[$i] =~ s/\+/ /g;
    
		# Split into key and value.
		($key, $val) = split(/=/,$in[$i],2); # splits on the first =.
    
		# Convert %XX from hex numbers to alphanumeric
		$key =~ s/%(..)/pack("c",hex($1))/ge;
		$val =~ s/%(..)/pack("c",hex($1))/ge;
   
		# Associate key and value. \0 is the multiple separator
		$in{$key} .= "\0" if (defined($in{$key}));
		$in{$key} .= $val;
	}
	return length($in);
}