#!/usr/bin/perl

########################################
#         WOnews v3.0
#  сделано 2001 WOscripts
#  http://www.woscripts.com
#  wo@womail.net
#
########################################
#            VARIABLES                 #
########################################

my $filename="wonews.cgi";                # Имя скрипта
my $datafd="data";                        # каталог для хранения данных
my $datafile="data.data";                 # Путь к файлу-базе

########################################

#---------------------------------------
use strict;
use CGI qw(:standard);
use CGI::Carp qw/fatalsToBrowser/;
use locale;
use vars qw($date $convert $timet $weekd $timeoffset $html_output $body $timeoffset @news_view);
$|=1;
#---------------------------------------

# **************** Default Vars *******************
          my($ff)="$datafd/setup.data";

            open(FILE, "<$ff");
             my $config=<FILE>;
              close(FILE);
                my($file_url,$sys,$maxmess,$template,$max_show,$timeoffset)=split(/\|/, $config);


# *************************************************


# *************** Set defoult vars ****************
          unless (-e "$datafd/setup.data")
          {
        if (! -e $datafd)
            {
                 mkdir("data", 0777) || die("Cant create data - dir ", $!);
           }
          open(FILE,">$datafd/setup.data") || die("Can't create data-file $datafd/setup.data ",$!);
           print FILE "http://$ENV{'HTTP_HOST'}$ENV{'SCRIPT_NAME'}|UNIX|1000|wonews.htmlt|10|1|";
           close(FILE);
            chmod(0660,"$datafd/setup.data");

             print "Location: $filename\n\n";
          }
# ----------------------------------------------------
            if (! -e "$datafd/template.data" || param('act') eq "defaultt")
          {
               open(TL, ">$datafd/template.data") || die("Can't create template-file $datafd/template.data ",$!);
        my $fill_in = qq~
                               <table border="0" width="100%" cellspacing="0" cellpadding="2">
                            <tr>
                              <td width="100%">
                        <table border="0" cellspacing="0" cellpadding="0" style="border:1px solid gray">
                          <tr>
                            <td bgcolor="#E5E5E5">[*TIME*] [*WEEK_DAY*] </td>
                          </tr>
                        </table>
                              </td>
                            </tr>
                            <tr>
                              <td width="100%">
                        <div align="justify" style="margin-left:5px">
                          [*NEWS*]
                        </div>
                              </td>
                            </tr>
                          </table>

                ~;
        print TL "$fill_in";

        close(TL);
        chmod(0660,"$datafd/template.data");

          }
# ************************************************************



if (param('password'))
{
         &cookies;
}

if (param('level') eq "setup")
{
         setup();
}
if (param('act') eq "safe_setup")
{
         safe_setup();
}
if (param('view') eq "view")
{
         &view;
          exit;
}
if (param('act') eq "archive")
{
         &archive;
          exit;
}

if (param('act') eq "del")
{
         &deleted;
}
if (param('act') eq "edit")
{
         &editpre;
          exit;
}
if (param('edit_end'))
{
         &edit_end;
}


if (param('news'))
{
         exist_file("$datafd/$datafile");
          &timed;
          my $mess=param('message');
            $mess=~s/\r\n/ /g;
          $mess=~s/\|/\\/g;
             $mess=~s/\"/&quot;/g;
        $mess=~s/\'/&quot;/g;

   if (length($mess)<=5 || length($mess)>=$maxmess)
   {
            $body.=    qq~



<center>
<table border="1" width="80%" bgcolor="#F3F3F3" cellspacing="0" cellpadding="0">
  <tr>
    <td width="100%">
      <p align="center"><b>ОШИБКА</b> - пожалуйста введите правильное количество символов<br>не меньше 6 и не больше $maxmess.</td>
  </tr>
</table>
</center>
<p align="center"><a href="$filename?act=main"><font size="2" face="Arial">Вернуться
на главную страницу &gt;&gt;</font></a></p


             ~;
&show_html_output;
exit;
   }




          open (FILE, ">>$datafd/$datafile") or die("Can not open data file ",$!);
           if ($sys ne "NT")
            {
                       flock(FILE, 2);
             }
              my $tt=time;

               print FILE "$tt|$mess|$date|$weekd|\n";

        close(FILE);

       $body.= qq~



<center>
<table border="1" width="80%" bgcolor="#F3F3F3" cellspacing="0" cellpadding="0">
  <tr>
    <td width="100%">
      <p align="center">Новости за $date были успешно
      добавлены.</td>
  </tr>
</table>
</center>
<p align="center"><a href="$filename?act=main"><font size="2" face="Arial">Вернуться
на главную страницу &gt;&gt;</font></a></p


       ~;
&show_html_output;
}

else
{
        $body.= qq~

<form method="POST" action="$filename">
  <table border="0" width="100%" cellspacing="0" cellpadding="0">
    <tr>
      <td width="21%"><textarea rows="5" name="message" cols="62"></textarea></td>
      <td width="35%" valign="bottom"><input type="submit" value="&lt;&lt;   ADD   &gt;&gt;" name="news"></td>
      <td width="44%" valign="top"><a href="$filename?level=setup">Установки</a></td>
    </tr>
  </table>
</form>
<hr width="100%" size="1" color="#009999">


       ~;

open (FILE, "<$datafd/$datafile") or exist_file("$datafd/$datafile");
my @lines=<FILE>;
close(FILE);

foreach(reverse @lines)
{
         my @mas=split(/\|/, $_);
          chomp(@mas);


   $body.= qq~


     <table border="0" width="100%" cellspacing="0" cellpadding="0">
  <tr>
    <td width="25%" bgcolor="#000080"><font color="#FFFFFF">$mas[2] | $mas[3]</font></td>
    <td width="75%">
      <p align="right"><font size="2" face="Arial"><b><a href="$filename?act=edit&amp;id=$mas[0]">&lt;edit&gt;</a>
      | <a href="$filename?act=del&amp;id=$mas[0]">&lt;delete&gt;</a></b></font></td>
  </tr>
  <tr>
    <td width="100%" colspan="2">$mas[1]</td>
  </tr>
  <tr>
    <td width="100%" colspan="2">
      <hr width="100%" size="1" color="#009999">
    </td>
  </tr>
</table>




   ~;


}

&show_html_output;

}

# ************************** CHECK FILE *******************************
sub exist_file
{
         my($file)=@_;
          unless (-e $file)
  {
          open(FILE,">$file") || die("Can't create data-file",$!);
           close(FILE);
            chmod(0666,$file);
  }
}

# ************************** TIME **********************************
sub timed
{
         my($sec,$min,$hours,$mday,$month,$year,$wday,$yday,$isdst)=localtime(time+(3600*$timeoffset));

            $month=$month+1;
 if ($min < 10) {$min="0$min";}
 if ($hours < 10) {$hours="0$hours";}
 if ($sec < 10) {$sec="0$sec";}
 if ($mday < 10) {$mday="0$mday";}
 if ($month <10) {$month="0$month";}
 my @days = qw(Воскресенье Понедельник Вторник Среда Четверг Пятница Суббота);


 $year=2000+($year-100);
 $year=substr($year,2);

  $timet="$hours:$min";
  $date="$mday/$month/$year";
  $weekd=$days[$wday];
   return ($date,$timet);


}
# **************************** DELETE ******************************
sub deleted
{
         my $id=param('id');

        open (FILE, "<$datafd/$datafile");
         my @lines=<FILE>;
          close (FILE);

           open (DFILE, ">$datafd/$datafile");
           if ($sys ne "NT")
            {
                       flock(DFILE, 2);
             }
           foreach (@lines)
            {
                       my @mas=split(/\|/, $_);

                  if ($id eq "$mas[0]")
                   {
                  print DFILE "";
                    }
                     else
                      {
                         print DFILE "$_";
                       }
             }


            close(DFILE);

}

# ********************************* EDIT PREVIEW ***************************
sub editpre
{
                 my $id=param('id');

        open (FILE, "<$datafd/$datafile");
         my @lines=<FILE>;
          close (FILE);

           foreach (@lines)
            {
                       my @mas=split(/\|/, $_);
                 chomp(@mas);
                 if ($id eq "$mas[0]")
                  {
                                        $body.= qq~


<form method="POST" action="$filename">
  <table border="0" width="100%" cellspacing="0" cellpadding="0">
    <tr>
      <td width="28%"><input type="text" name="date" size="20" value="$mas[2]"></td>
      <td width="72%"><input type="hidden" name="id" size="20" value="$mas[0]"></td>
    </tr>
    <tr>
      <td width="28%"><input type="text" name="weekd" size="20" value="$mas[3]"></td>
      <td width="72%"></td>
    </tr>
    <tr>
      <td width="28%"><textarea rows="5" name="text" cols="62">$mas[1]</textarea></td>
      <td width="72%" valign="bottom"><input type="submit" value="&lt;&lt;   Edit   &gt;&gt;" name="edit_end"></td>
    </tr>
  </table>
</form>




    ~;

                   }
             }
&show_html_output;




}

# **************************** EDIT END ******************************
sub edit_end
{
         my $id=param('id');
  my $mess=param('text');
            $mess=~s/\r\n/ /g;
          $mess=~s/\|/\\/g;
             $mess=~s/\"/&quot;/g;
        $mess=~s/\'/&quot;/g;
  my $date=param('date');
  my $weekd=param('weekd');


        open (FILE, "<$datafd/$datafile");
         my @lines=<FILE>;
          close (FILE);

           open (EFILE, ">$datafd/$datafile");
           if ($sys ne "NT")
            {
                       flock(EFILE, 2);
             }
           foreach (@lines)
            {
                       my @mas=split(/\|/, $_);

                  if ($id eq "$mas[0]")
                   {
                  print EFILE "$id|$mess|$date|$weekd|\n";
                    }
                     else
                      {
                         print EFILE "$_";
                       }
             }


            close(EFILE);

}


# ++++++++++++++++++++++++++++++++++++ VIEW ++++++++++++++++++++++++
sub view
{

 open (FILE, "<$datafd/$datafile");
my @lines=<FILE>;
my $i;
close(FILE);

my $rr=scalar(@lines);
if ($rr < $max_show)
{
 $max_show=$rr;
}
print "Content-type: text/html\n\n";
for($i=$rr-1; $i>=$rr-$max_show; $i--)
#(reverse @lines)
{
         my @mas=split(/\|/, $lines[$i]);
          chomp(@mas);

        open (TFILE, "<$datafd/template.data") or die("Can't open template file to read ",$!);
        while (<TFILE>)
        {
                $convert.=$_;
        }
        close (TFILE);
        $convert=~s/\[\*NEWS\*\]/$mas[1]/g;
        $convert=~s/\[\*TIME\*\]/$mas[2]/g;
        $convert=~s/\[\*WEEK_DAY\*\]/$mas[3]/g;


}
print "$convert\n";

if ($rr > $max_show)
{
       print qq~
       <table border="0" width="100%" cellspacing="0" cellpadding="0">
  <tr>
    <td width="100%">
      <p align="right"><a href="/news_archive.shtml">Архив &gt;&gt;</a></p></td>
  </tr>
</table>
       ~;
}

}

# ************************ SUB show_html_output ********************

sub show_html_output
{
        my($dat);
         open(FILE, "<$template");
          while (<FILE>)
           {
                     $dat.=$_;
           }

 my $cook=cookie('passw');
   unless ($cook)
   {

           $body="";
    $body=qq~
    <center>
      <form method="POST" name="ff">
  <table border="0" cellspacing="0" cellpadding="0">
    <tr>
      <td><input type="text" onClick="this.select()"; name="name" style="background-color: A5A6CE; border:1px solid black; color: white; width=100px;" value="Login"></td>
    </tr>
    <tr>
      <td><input type="password" onClick="this.select()"; name="pass" style="background-color: A5A6CE; border:1px solid black; color: white; width=100px;" value="Password"></td>
    </tr>
    <tr>
      <td><input  style="background-color: A5A6CE; border:1px solid black; color: white; font-weight: bold; width=100px;" type="submit" value="< Submit >" name="password"></td>
    </tr>
  </table>
  <p>&nbsp;</p>
</form>
</center>
    ~;
   }
    $dat=~s/\$POST/$body/g;

  print "Content-type: text/html\n\n";
  print "$dat";
}


# *************************** SUB Cookie ****************************
sub cookies
{

 my $named=param('name');
 my $pass=param('pass');
 $pass=crypt($pass, substr($pass,-1));
 my $script_path=$ENV{'SCRIPT_NAME'};
 open (F, "<$datafd/pass.dat");
 my($line)=<F>;
 close (F);

 my($n, $p)=split(/\|/, $line);

 if($named eq "$n" && $pass eq "$p")
 {

my $cookie=cookie(
                -name => "passw",
                  -value => "name=$named,password=$pass",
                    -path => "$script_path");
#                    -expires => "+2y");

      print header(-cookie => $cookie);

 print qq~
<html><head>
<META HTTP-EQUIV="Refresh" CONTENT="0; URL=$filename">
</head></html>
~;
exit;
}
else
{
         print "Location:$filename\n\n";
  exit;
}


}


# *************************** Sub Archive ********************
sub archive
{

my($dat);

my $body;
 open (FILE, "<$datafd/$datafile");
my @lines=<FILE>;
my $i;
close(FILE);

my $rr=scalar(@lines);
print "Content-type: text/html\n\n";
print ("<center><h3>Архив новостей</h3></center><hr color=#009999>");
for($i=$rr-$max_show-1; $i>=0; $i--)

#(reverse @lines)
{
         my @mas=split(/\|/, $lines[$i]);
          chomp(@mas);

        open (TFILE, "<$datafd/template.data") or die("Can't open template file to read ",$!);
        while (<TFILE>)
        {
                $convert.=$_;
        }
        close (TFILE);
        $convert=~s/\[\*NEWS\*\]/$mas[1]/g;
        $convert=~s/\[\*TIME\*\]/$mas[2]/g;
        $convert=~s/\[\*WEEK_DAY\*\]/$mas[3]/g;


}
print "$convert\n";

}

# ************************* SUB Setup ************************
sub setup
{
        my($ff)="$datafd/setup.data";

            open(FILE, "<$ff");
             my $config=<FILE>;
              close(FILE);
                my($file_url1,$sys1,$maxmess1,$template1,$max_show1,$timeoffset1)=split(/\|/, $config);

        open(TL, "<$datafd/template.data") || die("Can't open template file to read ",$!);
               my @news_view=<TL>;
        close(TL);

        $body.= qq~
<form method="POST" action="$filename">
  <div align="center">
    <center>
    <table border="0" width="500">
      <tr>
        <td width="100%" colspan="2" align="center" bgcolor="#6583A7"><b><font color="#FFFFFF">Установки</font></b></td>
      </tr>
      <tr>
        <td width="50%">URL&nbsp; к файлу скрипту</td>
        <td width="50%"><input type="text" name="file_url" size="20" value="$file_url1"></td>
      </tr>
      <tr>
        <td width="50%">Система (UNIX/NT)</td>
        <td width="50%"><input type="text" name="sys" size="20" value="$sys1"></td>
      </tr>
      <tr>
        <td width="50%">Максимальное количество
          символов в новости</td>
        <td width="50%"><input type="text" name="maxmess" size="20" value="$maxmess1"></td>
      </tr>
      <tr>
        <td width="50%">Путь к файлу шаблону</td>
        <td width="50%"><input type="text" name="template" size="20" value="$template1"></td>
      </tr>
      <tr>
        <td width="50%">Максимальное кол. выводимых
          новостей</td>
        <td width="50%"><input type="text" name="max_show" size="20" value="$max_show1"></td>
      </tr>
      <tr>
        <td width="50%">Часовое отклонение</td>
        <td width="50%"><input type="text" name="timeoffset" size="20" value="$timeoffset1"></td>
      </tr>
      <tr>
        <td width="30%">Вид выводимых новостей</td>
        <td width="70%"><textarea rows="10" name="news_view" cols="50">@news_view</textarea><br>
          <input type="hidden" value="safe_setup" name="act"><a href="$filename?act=defaultt&amp;level=setup">Вернуться
          к стандартному виду</a></td>
      </tr>
      <tr>
        <td width="50%"><input type="submit" value="Сохранить" name="submit"></td>
        <td width="50%"></td>
      </tr>
      <tr>
        <td width="100%" colspan="2">
          <p align="center"><a href="$filename">&lt;&lt; На главную
          &gt;&gt;</a></td>
      </tr>
    </table>
    </center>
  </div>
</form>



                ~;
show_html_output();
exit;

}

# *************************** SUB safe_setup **********************
sub safe_setup
{
        my $file_url_s=param('file_url');
        my $sys_s=param('sys');
        my $maxmess_s=param('maxmess');
        my $template_s=param('template');
        my $max_show_s=param('max_show');
        my $timeoffset_s=param('timeoffset');
        my $news_view_s=param('news_view');


          open(FILE,">$datafd/setup.data") || die("Can't open data-file to write ",$!);
        if ($sys eq "UNIX")
        {
                flock(FILE,2);
        }
           print FILE "$file_url_s|$sys_s|$maxmess_s|$template_s|$max_show_s|$timeoffset_s|";
           close(FILE);

        open (T, ">$datafd/template.data") or die("Can't open template file to write ",$!);
        if ($sys eq "UNIX")
        {
                flock(T,2);
        }
         print T "$news_view_s";
        close(T);

        print "Location: $filename?level=setup\n\n";

}