1	#!/local/bin/perl
     2	##############################################
     3	# generic.cgi                                #
     4	# Started by Steve Sowder on June 7, 2004    #
     5	##############################################
     6	
     7	require "cgi-lib.pl";
     8	&ReadParse(*input);
     9	
    10	print &PrintHeader;
    11	
    12	&loadconfig;
    13	&verifyconfig;
    14	&makebackup;
    15	
    16	
    17	## Global Field Names
    18	# $KEYLENGTH  - length of the numeic primary key 
    19	# $DATABASE   - The filename of the database (no path info)
    20	# $HOMEBASE   - the name of this program with absolute path name
    21	# $SYSTEMSIP  - IP address of the systems user
    22	# $SYSTEMSUSER- equal "Y" if true
    23	# $USERIP     - Ip address of the library user
    24	# @FIELDS     - Names of the fields in the database
    25	# @DISPLAY    - Nmaes to use for displaying the field names of the database
    26	# @SECURITY   - Security level for each field
    27	# @DATATYPE   - Datatype for each field
    28	#
    29	
    30	
    31	&verifysecurity;
    32	
    33	
    34	$action       = $input{'action'};
    35	$field_count  = @FIELDS;
    36	$col_span     = $field_count + 1;
    37	$search_field = $input{'search_field'};
    38	$search_for   = $input{'search_for'};
    39	@keys         = $input{'key'};
    40	$key_matches  = @keys;
    41	
    42	
    43	if($action =~ /add record/i){
    44	 # Add the record passed from the add record page
    45	#  $key = $keys[0];
    46	#print "<br>add record routine\n";
    47	  &add_record;
    48	  $message="Record Added";
    49	  &print_message($message);
    50	}
    51	elsif($action =~ /add/i){
    52	 # Display the add record page
    53	  &print_add_screen;
    54	}
    55	
    56	
    57	elsif($action =~ /search/i)
    58	  {
    59	# Search database and display the results
    60	  &search_database($search_for);
    61	  $count = @results;
    62	  if($count > 0)
    63	    {
    64	    $button_text = "Back to Database";
    65	    $caption = "Search Results";
    66	    &multiple_match;
    67	    }
    68	    else {&no_match; } 
    69	  }
    70	
    71	elsif($action =~ /modify record/i)
    72	  {
    73	# Display the results of the search
    74	
    75	  &search_database($input{'key'});
    76	  $count = @results;
    77	  &no_match if($count < 1);
    78	  &print_modify_page;
    79	  }
    80	
    81	elsif($action =~ /modify this record/i)
    82	  {
    83	# Modify the record that was passed
    84	  $key=$keys[0];
    85	  &add_record;
    86	  $message="Record Modified";
    87	  &print_message($message);
    88	  }
    89	
    90	elsif($action =~ /modify/i)
    91	  {
    92	# Search and display results for modification
    93	  &search_database($search_for);
    94	  $count = @results;
    95	  if($count < 1) {&no_match }
    96	  elsif($count == 1) {&print_modify_page  }
    97	  else
    98	    {
    99	    $caption="Modify Which Record?";
   100	    $button_text="Modify Record";
   101	    &multiple_match("RADIO","modify");
   102	    }
   103	  }
   104	
   105	
   106	elsif($action =~ /delete record/i){
   107	 # Delete the record(s) that were passed
   108	  $key = $keys[0];
   109	  &delete_records;
   110	  $message="Record(s) Deleted";
   111	  &print_message($message);
   112	}
   113	elsif($action =~ /delete/i){
   114	 # Search and display results for modification
   115	  &search_database($search_for);
   116	  $count = @results;
   117	  &no_match if($count < 1);
   118	  $caption="Delete Which Record(s)?";
   119	  $button_text="Delete Record(s)";
   120	  &multiple_match("CHECKBOX","delete");
   121	
   122	}
   123	elsif($action =~ /update/i){
   124	 # update file
   125	  &update_database;
   126	  $message='File Updated';
   127	  &print_message($message);
   128	
   129	}
   130	elsif($action =~ /publish/i){
   131	 # update file
   132	  &update_database;
   133	  &publish;
   134	  $message='File Updated and Published';
   135	  &print_message($message);
   136	
   137	
   138	}
   139	
   140	
   141	else {&print_default}
   142	
   143	###########################################
   144	sub add_record  {
   145	$key = $input{'key'};                  # key 0
   146	
   147	if (length($key) != $KEYLENGTH)
   148	  { &get_highest_key; $key = $nextkey; }
   149	$record  = $key;
   150	
   151	$timestamp  = time();                 # key 1
   152	$record .= "\^$timestamp";
   153	
   154	for ($x = 2; $x <= $field_count; $x++)  # remaining keys
   155	  {   
   156	  $field  = $input{"$FIELDS[$x]"};        
   157	  $field  = filter($field);
   158	  if ($DATACASE[$x] =~ /U/i) {$field = uc $field }
   159	  $record   .= "\^$field";
   160	  }
   161	
   162	open (DB, ">>$DATABASE") || die "Error opening database for add.  $!\n";
   163	
   164	flock DB, $EXCLUSIVE;
   165	#  seek DB, 0, 2;
   166	print DB "$record\n";
   167	flock DB, $UNLOCK;
   168	close(DB);
   169	
   170	} # End of add_record subroutine.
   171	###########################################
   172	sub print_add_screen{
   173	  print<<HTML;
   174	   <HTML><HEAD><TITLE>Add a Record</TITLE></HEAD>
   175	    <BODY BGCOLOR="#FFFFFF">
   176	     <CENTER><FONT SIZE=5 FACE="ARIAL">
   177	      Add a Record
   178	     </FONT></CENTER>
   179	     <P>
   180	     <FORM
   181	ACTION="$thisprogram"
   182	 METHOD=POST>
   183	
   184	
   185	      <CENTER><TABLE BORDER=1 CELLSPACING=0>
   186	HTML
   187	
   188	  $x=0;
   189	  foreach $field (@FIELDS)
   190	    {
   191	    print<<HTML;
   192	    <TR BGCOLOR="e0e0e0">
   193	HTML
   194	    if ($SYSTEMSUSER =~ /Y/ and $SECURITY[$x] =~ /S/) {$SECURITY[$x] = 'O'}
   195	    if ($SYSTEMSUSER !~ /Y/ and $SECURITY[$x] =~ /S/) {$SECURITY[$x] = 'D'}
   196	
   197	    if ($SECURITY[$x] =~ /D/i)  # display - display only no changes
   198	      {
   199	      print <<DISPLAY;
   200	      <TD>$fs<B>\u$DISPLAY[$x]:</B>$fc</TD>
   201	      <TD>$field_vals[$x]</TD>
   202	      </TR>
   203	DISPLAY
   204	      }
   205	
   206	    if ($SECURITY[$x] =~ /O/i)   # open - display and allow changes
   207	      {
   208	      if ($DATATYPE[$x] =~ /T/i)
   209	        {
   210	        print <<OPENTEXT;
   211	        <TD>$fs<B>\u$DISPLAY[$x]:</B>$fc</TD>
   212	        <TD><INPUT TYPE="TEXT" NAME="$field" VALUE="$field_vals[$x]" SIZE=60></TD>
   213	        </TR>
   214	OPENTEXT
   215	        }  # end type T
   216	        else
   217	        {
   218	        print <<OPENAREA;
   219	        <TR bgcolor="e0e0e0"><td>$fs<B>\u$DISPLAY[$x]:</B>$fc</TD>
   220	        <td><textarea name="$field" cols=80 rows=3 wrap=virtual>$field_vals[$x]
   221	        </textarea>
   222	        </td>
   223	OPENAREA
   224	        }  # end else not type T (eg type A)
   225	      }
   226	
   227	
   228	##---------
   229	#    if ($x < 8)
   230	#      {
   231	#      print "<TD>$fs<B>\u$field:</B>$fc</TD>";
   232	#      if ($x <= 1) {print '<td> </td>'; }
   233	#        else
   234	#        {
   235	#        print <<HTML2;
   236	#        <TD><INPUT TYPE="TEXT" NAME="$field" VALUE="$field_vals[$x]"
   237	#        SIZE=60></TD>
   238	#        </TR>
   239	#HTML2
   240	#        }
   241	#      }
   242	#    elsif ($x == 8)
   243	#      {
   244	#  print <<DESCR;
   245	#  <TR bgcolor="e0e0e0"><td>$fs<B>\u$field:</B>$fc</TD>
   246	#  <td><textarea name="descript" cols=80 rows=3 wrap=virtual>$field_vals[$x]
   247	#  </textarea>
   248	#  </td>
   249	#DESCR
   250	
   251	
   252	#       }
   253	#     else
   254	#       {
   255	#    print "<TD><INPUT TYPE=TEXT NAME=\"$field\" size=60></TD>";
   256	#       }
   257	#    print '</TR>';
   258	
   259	  $x++;
   260	  } # End of foreach.
   261	      print<<HTML;
   262	       <TR>
   263	        <TD COLSPAN=2 BGCOLOR="e0e0e0">
   264	         <CENTER>
   265	          <INPUT TYPE=SUBMIT NAME=action VALUE="Add Record">
   266	         </CENTER>
   267	        </TD>
   268	       </TR>
   269	      </TABLE></CENTER>
   270	     <P>
   271	    </FONT>
   272	   </BODY></HTML>
   273	HTML
   274	} # End of print_add_screen subroutine.
   275	
   276	
   277	###########################################
   278	sub get_highest_key
   279	  {
   280	  open (DB, "$DATABASE") || die "Error opening database for get_key $!\n";
   281	
   282	  flock DB, $EXCLUSIVE;
   283	#  seek DB, 0, 2;
   284	  $nextkey = '     ';
   285	$didthis = 'yes';
   286	  while ($getkey = <DB>)
   287	    {
   288	    $thiskey = substr($getkey,0,$KEYLENGTH);
   289	    if ($thiskey gt $nextkey and $thiskey lt '9900') {$nextkey = $thiskey;}
   290	    }
   291	  flock DB, $UNLOCK;
   292	  close(DB);
   293	  $nextkey = $nextkey + 1;
   294	  while (length($nextkey) < $KEYLENGTH) {$nextkey = '0' . $nextkey;  }
   295	
   296	  } # end of get_highest_key
   297	
   298	###########################################
   299	sub delete_records
   300	  {
   301	#  $record  = $key;
   302	  $record = $input{'key'};
   303	  $record = substr($record,0,$KEYLENGTH);  # get only number part of key
   304	  $timestamp  = time();
   305	  $record .= "\^$timestamp";
   306	
   307	  $record   .= "\^**KILLED**";  # in name field
   308	
   309	  for ($x = 4; $x < $field_count; $x++) {$record .= "\^";  }
   310	
   311	  open (DB, ">>$DATABASE") || die "Error opening database for del.  $!\n";
   312	
   313	  flock DB, $EXCLUSIVE;
   314	  print DB "$record\n";
   315	  flock DB, $UNLOCK;
   316	  close(DB);
   317	
   318	  } # End of delete subroutine.
   319	
   320	
   321	###########################################
   322	sub filter{
   323	my  $temp = $_[0];
   324	  $temp =~ s/\^//; # Remove pipe symbols in text.
   325	  $temp =~ s/\r//; # Remove carriage return in text.
   326	  $temp =~ s/\s+$//; # remove trailing blanks
   327	
   328	  return ($temp);
   329	}
   330	
   331	
   332	
   333	###########################################
   334	sub print_modify_page{
   335	
   336	(@field_vals) = split(/\^/, $results[0]);
   337	$key = $field_vals[0];
   338	$fs="<FONT SIZE=2 FACE=ARIAL>";
   339	$fc="</FONT>";
   340	
   341	print<<HTML;
   342	<html><header>
   343	<TITLE>Modify Record</title>
   344	<body BGCOLOR='white'>
   345	<form method="POST" action="$HOMEBASE">
   346	
   347	<CENTER><FONT SIZE=5 FACE=ARIAL>
   348	 Modify Record
   349	</FONT></CENTER>
   350	<HR WIDTH=75%>
   351	<INPUT TYPE=HIDDEN NAME=key value="$key">
   352	<CENTER>
   353	<TABLE BORDER=1 CELLSPACING=0>
   354	HTML
   355	
   356	  $x=0;
   357	  foreach $field (@FIELDS)
   358	    {
   359	    print<<HTML;
   360	    <TR BGCOLOR="e0e0e0">
   361	HTML
   362	    if ($SYSTEMSUSER =~ /Y/ and $SECURITY[$x] =~ /S/) {$SECURITY[$x] = 'O'}      
   363	    if ($SYSTEMSUSER !~ /Y/ and $SECURITY[$x] =~ /S/) {$SECURITY[$x] = 'D'}
   364	  
   365	    if ($SECURITY[$x] =~ /D/i)  # display - display only no changes
   366	      {
   367	      print <<DISPLAY;
   368	      <TD>$fs<B>\u$DISPLAY[$x]:</B>$fc</TD>
   369	      <TD>$field_vals[$x]</TD>
   370	      </TR>
   371	DISPLAY
   372	      }
   373	
   374	    if ($SECURITY[$x] =~ /O/i)   # open - display and allow changes
   375	      {
   376	      if ($DATATYPE[$x] =~ /T/i)
   377	        {
   378	        print <<OPENTEXT;
   379	        <TD>$fs<B>\u$DISPLAY[$x]:</B>$fc</TD>
   380	        <TD><INPUT TYPE="TEXT" NAME="$field" VALUE="$field_vals[$x]" SIZE=60></TD>
   381	        </TR>
   382	OPENTEXT
   383	        }  # end type T
   384	        else
   385	        {
   386	        print <<OPENAREA;
   387	        <TR bgcolor="e0e0e0"><td>$fs<B>\u$DISPLAY[$x]:</B>$fc</TD>
   388	        <td><textarea name="$field" cols=80 rows=3 wrap=virtual>$field_vals[$x]
   389	        </textarea>
   390	        </td>
   391	OPENAREA
   392	        }  # end else not type T (eg type A)
   393	      }
   394	    
   395	#    elsif ($x == 8)
   396	#      {
   397	#  print <<DESCR;
   398	#  <TR bgcolor="e0e0e0"><td>$fs<B>\u$field:</B>$fc</TD>
   399	#  <td><textarea name="descript" cols=80 rows=3 wrap=virtual>$field_vals[$x]
   400	#  </textarea>
   401	#  </td>
   402	#DESCR
   403	
   404	  $data =~ s/\s+//;
   405	  $num = substr($data,1,4);
   406	
   407	  $DES[$num] = $data;
   408	
   409	
   410	#      }
   411	    $x++;
   412	    } # End of foreach.
   413	
   414	
   415	print<<HTML;
   416	     <TR BGCOLOR="efefef">
   417	      <TD COLSPAN=2>
   418	       <CENTER>
   419	        <INPUT TYPE=SUBMIT NAME=action VALUE="Modify This Record">
   420	       </CENTER>
   421	      </TD>
   422	     </TR>
   423	    </TABLE>
   424	   </CENTER>
   425	   <P><HR WIDTH=75%>
   426	  </BODY></HTML>
   427	HTML
   428	}
   429	
   430	
   431	
   432	
   433	###########################################
   434	sub search_database
   435	  {
   436	  $search_for = $_[0];
   437	  open(DB, $DATABASE) or die "Error opening file: $!\n";
   438	    while(<DB>)
   439	      {
   440	      if (length($search_for) == $KEYLENGTH+10)   # search_for has number & timestamp
   441	        {
   442	        $search_for = substr($_[0],0,$KEYLENGTH) . "\^" . substr($_[0],$KEYLENGTH);
   443	        $search_field = 'all';
   444	        }
   445	      if($search_field =~ /all/i)
   446	        {
   447	        if (length($search_for) != $KEYLENGTH+11)
   448	          {if(/$search_for/oi){push @results, $_}; }
   449	        if (length($search_for) == $KEYLENGTH+11)
   450	          {
   451	          $temp = substr($_,0,$KEYLENGTH+11);
   452	          if ($temp eq $search_for) {push @results, $_ ;}
   453	          }
   454	        }
   455	        else
   456	        {
   457	        (@field_vals) = split(/\^/, $_);     # delimiter changed Sowder
   458	        if($field_vals[$search_field] =~ /$search_for/oi){push @results, $_};
   459	        } # End of else.
   460	      } # End of while.
   461	  close (DB);
   462	  } # End of search_database subroutine.
   463	
   464	###########################################
   465	sub multiple_match{
   466	  print "<html><header>\n";
   467	  print "<TITLE=>'Match Results'</title>\n";
   468	  print "<body BGCOLOR='white'>\n";
   469	  print<<HTML;
   470	   <FONT SIZE=6 FACE=ARIAL>
   471	    <CENTER>$caption</CENTER>
   472	   </FONT>
   473	   <FONT FACE=ARIAL>
   474	    <CENTER>There were $count matches</CENTER>
   475	   </FONT>
   476	   <FORM METHOD=POST>
   477	   <HR WIDTH=75%>
   478	   <P>
   479	   <CENTER><TABLE BORDER=1 CELLSPACING=0>
   480	    <TR BGCOLOR="#e0e0e0">
   481	HTML
   482	
   483	  if($_[1] =~ /(modify|delete)/)  # and not search
   484	    {
   485	    print "<TD ALIGN=CENTER>";
   486	    print "<FONT SIZE=2 FACE=ARIAL><B>Select</B></FONT></TD>\n";
   487	    }
   488	
   489	  foreach $field (@FIELDS)   # print field titles
   490	    {
   491	    print "<TD ALIGN=CENTER>";
   492	    print "<FONT SIZE=2 FACE=ARIAL><B>\u$field</B></FONT></TD>\n";
   493	    } # End of foreach
   494	
   495	  print "</TR>";
   496	
   497	  foreach $record (@results)  # print field contents
   498	    {
   499	    (@field_vals) = split(/\^/, $record);
   500	
   501	    print "<TR BGCOLOR=\"#efefef\">";
   502	
   503	    if($_[1] =~ /(modify|delete)/)  # and not search
   504	      {
   505	      print "<TD ALIGN=CENTER><FONT SIZE=2 FACE=ARIAL>";
   506	      print "<INPUT TYPE=$_[0] NAME=key VALUE=$field_vals[0]$field_vals[1]>";
   507	      print "</FONT></TD>\n";
   508	      } # End of if.
   509	
   510	    for($x=0;$x<$field_count;$x++)  # display each field contents
   511	      {
   512	      $item = &check_empty($field_vals[$x]);
   513	      print "<TD><FONT SIZE=2 FACE=ARIAL>$item</FONT></TD>\n";
   514	      }
   515	     print "</TR>";
   516	  } # End of foreach loop.
   517	
   518	  print<<HTML;
   519	  <TR BGCOLOR="#e0e0e0">
   520	   <TD COLSPAN=$colspan ALIGN=CENTER>
   521	    <INPUT TYPE=SUBMIT NAME=action VALUE="$button_text">
   522	   </TD>
   523	  </TR>
   524	 </TABLE>
   525	</FORM></BODY></HTML>
   526	HTML
   527	} # End of multiple_match subroutine.
   528	
   529	
   530	###########################################
   531	sub no_match{
   532	  print <<HTML;
   533	  <html><header>
   534	  <TITLE>No Match</title>
   535	  <body BGCOLOR='white'>
   536	  <H2><CENTER>There was no match for <I>$search_for</I>
   537	  please hit <B>back</B> and try again.</CENTER></H2>
   538	  </body></html>
   539	HTML
   540	  exit;
   541	} # End of no_match subroutine.
   542	
   543	###########################################
   544	sub print_message {
   545	  print<<HTML;
   546	    <HTML><BODY BGCOLOR="#FFFFFF" TEXT=ARIAL>
   547	     <FONT SIZE=6><CENTER>$_[0]</CENTER></FONT><HR WIDTH=75%>
   548	     <P>
   549	     <FONT SIZE=5><CENTER>
   550	      Back To <A
   551	HREF="$HOMEBASE">
   552	    Main Database Screen</A>
   553	      </CENTER></FONT>
   554	    </BODY></HTML>
   555	HTML
   556	}
   557	
   558	###########################################
   559	sub check_empty{
   560	  $r_val = $_[0];
   561	  if($r_val =~ /^\s*$/){$r_val="&nbsp;"}
   562	
   563	  return($r_val);
   564	}
   565	
   566	#################################################
   567	sub update_database {
   568	
   569	## sort the database file to update database
   570	
   571	my $backupfile = $DATABASE . '.scr';
   572	
   573	print "UPDATING THE DATABASE...\n";
   574	open INFILE, "$DATABASE" or die "no joy in\n";
   575	open OUTFILE, ">$backupfile" or die "no joy out\n";
   576	
   577	print OUTFILE sort (<INFILE>);
   578	
   579	close INFILE;
   580	close OUTFILE;
   581	
   582	open (INFILE, "$backupfile") or die "no joy in\n";
   583	open (OUTFILE, ">$DATABASE") or die "no joy out\n";
   584	my $lastrecord = '';
   585	
   586	while ($line = <INFILE>)
   587	  {
   588	  chomp($line);
   589	
   590	  if (length($lastrecord) > 0
   591	      and substr($line,0,$KEYLENGTH) ne substr($lastrecord,0,$KEYLENGTH))
   592	    {
   593	    if (index($lastrecord,'**KILLED**') < 0)
   594	      {print OUTFILE "$lastrecord\n";  }
   595	    }
   596	  $lastrecord = $line;
   597	  }
   598	
   599	my $x;
   600	my $keyt;
   601	
   602	for ($x = 1; $x <= $KEYLENGTH; $x++) {$keyt = $keyt . '9'}
   603	
   604	print OUTFILE "$keyt\^999999999\^999\^\^\^\^\^\^\n";
   605	
   606	close INFILE;
   607	close OUTFILE;
   608	
   609	}  # end of update_database
   610	
   611	
   612	##########################
   613	sub print_default {
   614	print <<HTML;
   615	  <HTML><HEAD>
   616	  <TITLE>$DATANAME SCREEN</TITLE>
   617	  </HEAD><BODY>
   618	  <FORM METHOD="post" ACTION="$HOMEBASE">
   619	  <CENTER><FONT SIZE=4 FACE="ARIAL"><B>
   620	   $DATANAME SCREEN
   621	  </B></FONT></CENTER><P>
   622	
   623	  <CENTER>
   624	   <TABLE BORDER=1 WIDTH="75%" BGCOLOR="#e0e0e0" CELLSPACING="0">
   625	   <TR>
   626	    <TD COLSPAN=2>
   627	     <CENTER><FONT FACE="ARIAL" SIZE=2>
   628	      To <I>add</I> a record, click on the Add button.
   629	      To <I>search/modify/delete</I> records, enter the text in
   630	      the box below and choose the field to search on. Then
   631	      click to appropriate button.
   632	     </FONT></CENTER>
   633	    </TD>
   634	   </TR><TR>
   635	    <TD><FONT FACE="ARIAL" SIZE=2><B>Search For:</B></FONT></TD>
   636	    <TD><INPUT TYPE="text" NAME="search_for" SIZE="40"></TD>
   637	   </TR><TR>
   638	    <TD><FONT FACE="ARIAL" SIZE=2><B>Search On:</B></FONT></TD>
   639	    <TD><FONT FACE="ARIAL" SIZE=2>
   640	     <INPUT TYPE="radio" NAME="search_field" VALUE="all" CHECKED>All
   641	     <INPUT TYPE="radio" NAME="search_field" VALUE="0">Number
   642	     <INPUT TYPE="radio" NAME="search_field" VALUE="2">Name
   643	    </FONT></TD>
   644	   </TR><TR>
   645	    <TD COLSPAN=2>
   646	     <CENTER>
   647	      <INPUT TYPE="submit" NAME="action" VALUE="   Add   ">
   648	      <INPUT TYPE="submit" NAME="action" VALUE="Search">
   649	      <INPUT TYPE="submit" NAME="action" VALUE="Modify">
   650	      <INPUT TYPE="submit" NAME="action" VALUE="Delete">
   651	      <INPUT TYPE="submit" NAME="action" VALUE="Update">
   652	      <INPUT TYPE="submit" NAME="action" VALUE="Publish">
   653	
   654	     </CENTER>
   655	    </TD>
   656	  </TR>
   657	 </TABLE></FORM></BODY></HTML>
   658	HTML
   659	
   660	}
   661	#############################
   662	sub publish {
   663	
   664	&staff directory;
   665	&phonedirectory;
   666	&emaildirectory;
   667	
   668	
   669	# FLASH USER
   670	print <<HTML;
   671	print <html><body>
   672	<h2>Publish Routine Completed</h2>
   673	<FORM METHOD="post" ACTION="$HOMEBASE">
   674	<CENTER><FONT SIZE=4 FACE="ARIAL"><B>
   675	<input type="submit" name="action" value="Return to Menu">
   676	HTML
   677	
   678	
   679	
   680	} # end publish
   681	
   682	#############################
   683	sub staffdirectory {
   684	my @temp;
   685	
   686	open INFILE, "$DATABASE";
   687	
   688	while ($line = <INFILE>)
   689	  {
   690	  chomp $line;
   691	  @f = split /\^/, $line;
   692	
   693	  if ($f[11] !~ /Y/i and $f[0] ne '999') {push @temp, "$f[2]^$line" }
   694	
   695	  }
   696	close INFILE;
   697	@temp = sort @temp;
   698	open OUTFILE, '>newstaff.html';
   699	
   700	&printtemplate;
   701	
   702	#----
   703	#<tr> 
   704	#  <td colspan="2" bgcolor="#FFCC66"> 
   705	#  <p>
   706	#    <a name="algers"></a>
   707	#    <font face="Arial, Helvetica, sans-serif" size="2">
   708	#      <b>
   709	#      Sallie Alger
   710	#      </b>
   711	#    </font>
   712	#  </p>
   713	#  </td>
   714	#</tr>
   715	#
   716	#<tr> 
   717	#  <td bgcolor="#F0F8FF" width="682" align="left" valign="top"><font face="Arial, 
   718	#Helvetica, sans-serif" size="2">Head 
   719	#      of Bibliographic Services<br>
   720	#      Assistant Professor of Library Science<br>
   721	#      M.L.S., Indiana University<br>
   722	#      M.S.A., Andrews University<br>
   723	#      Room 252, Main Floor, James White Library<br>
   724	#      Phone: (269) 471-6215<br>
   725	#
   726	#      Email: <a href="mailto:salger@andrews.edu">salger@andrews.edu</a><br>
   727	#      Interests: Reading, Travel, Aerobics, Music, Grandbaby</font></td>
   728	#    <td bgcolor="#FFFFFF" width="200"> <p align="center"><img src="Sallie.JPG" 
   729	#width="120"></p></td>
   730	#	  
   731	#  </tr>
   732	#----
   733	
   734	foreach $line (@temp)
   735	  {
   736	  @f = split /\^/, $line;
   737	#  $phone =~ s!\(269\) 471-!!g;
   738	  ($last,$first) = split /\,/, $f[3];
   739	  $last =~ s/\s+$//;
   740	  $first =~ s/^\s+//;
   741	  $first =~ s/^\s+$//;
   742	  $anchor = lc ($last . substr($first,0,1));
   743	  print OUTFILE <<DATALINE;
   744	<tr><td><a name="$anchor"></a><b>$first $last</b></td>
   745	<tr>$f[4]
   746	<br>$f[5]
   747	<br>$f[6]
   748	</tr>
   749	DATALINE
   750	  }
   751	
   752	&gettime;
   753	print OUTFILE <<HTML;
   754	</table><p>Updated $MONTH/$DAY/$YEAR
   755	</body></html>
   756	HTML
   757	
   758	close OUTFILE;
   759	
   760	
   761	
   762	} # end staffdirectory
   763	
   764	#############################
   765	sub printtemplate {
   766	
   767	print OUTFILE <<TEMPLATE;
   768	<body>
   769	<!-- From a database by Steve Sowder  -->
   770	<title>Staff Directory, James White Library</title>
   771	<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   772	<link href="../jwlstyle.css" rel="stylesheet" type="text/css">
   773	</head>
   774	<body bgcolor="#FFFFFF" leftmargin="0" topmargin="0">
   775	<table width="717" border="0" cellspacing="0" cellpadding="0" height="155">
   776	  <tr> 
   777	    <td rowspan="2" width="66" height="140" align="center" valign="top" 
   778	bgcolor="#F0F8FF"><a href="../index.html"><img src="../images/home_03.jpg" width="65" 
   779	height="140" border="0" alt="JWL homepage."></a></td>
   780	    <td height="35" bgcolor="#FFFFFF" valign="middle" colspan="5" align="left">&nbsp;</td>
   781	    <td height="35" bgcolor="#FFFFFF" valign="middle" width="641" align="left"><a 
   782	href="http://www.andrews.edu"><img src="../au_logo.gif" width="225" height="30" 
   783	border="0" alt="Andrews University homepage."></a></td>
   784	
   785	  </tr>
   786	  <tr> 
   787	    <td bgcolor="#F0F8FF" colspan="6" align="center" valign="top" height="64"> 
   788	      <img src="../banner5.gif" width="660" height="60" usemap="#Map" border="0"><map 
   789	name="Map"><area shape="rect" coords="9,26,572,57" href="../index.html" target="_self" 
   790	alt="James White Library Information Gateway." title="James White Library Information 
   791	Gateway."><area shape="rect" coords="500,3,576,18" href="../about/about.html" 
   792	target="_self" alt="About JWL." title="About JWL.">
   793		  <area shape="rect" coords="588,4,653,20" 
   794	href="http://143.207.5.3/patroninfo/" target="_self" alt="MyLibrary" 
   795	title="MyLibrary"></map><br>
   796	      <div align="center"> 
   797	        <table width="600" border="0" cellspacing="0" cellpadding="1">
   798	          <tr> 
   799	            <td height="49"> 
   800	              <div align="center"><font face="Arial, Helvetica, sans-serif" 
   801	size="2"><a href="../catalogs.html">Library<br>
   802	                Catalogs </a></font> </div>
   803	
   804	            </td>
   805	            <td height="49"> 
   806	              <div align="center"><font face="Arial, Helvetica, sans-serif" 
   807	size="2"><a href="../articles.html">Find<br>
   808	                Articles</a></font></div>
   809	            </td>
   810	            <td height="49"> 
   811	              <div align="center"><font face="Arial, Helvetica, sans-serif" 
   812	size="2"><a 
   813	href="http://www.andrews.edu/library/screens/databases/onlineresources.html">List 
   814	                All<br>
   815	                Databases</a> </font></div>
   816	
   817	            </td>
   818	            <td height="49"> 
   819	              <div align="center"><font face="Arial, Helvetica, sans-serif" 
   820	size="2"><a href="../RefDesk/research.html">Research 
   821	                Help &amp;<br>
   822	                Online Reference</a></font></div>
   823	            </td>
   824	            <td height="49"> 
   825	              <div align="center"><font face="Arial, Helvetica, sans-serif" 
   826	size="2"><a href="../sda.html">Adventist<br>
   827	                Resources</a></font></div>
   828	
   829	            </td>="49"> 
   830	              <div align="center"><font face="Arial, Helvetica, sans-serif" 
   831	size="2"><a href="../internet.html">Internet<br>
   832	                Search Engines</a></font></div>
   833	            </td>
   834	          </tr>
   835	        </table>
   836	      </div> </td>
   837	
   838	  </tr>
   839	</table>
   840	<table width="727" border="0" cellspacing="1" cellpadding="1">
   841	
   842	  <tr> 
   843	    <td colspan="2" bgcolor="#FFCC66"> 
   844	      <div align="center">
   845	        <font size="4" face="Arial, Helvetica, sans-serif">
   846	        <b>Staff Directory</b>
   847	        </font>
   848	      </div>
   849	    </td>
   850	  </tr>
   851	TEMPLATE
   852	} # end printtemplate
   853	
   854	#############################
   855	# make telephone directory
   856	#
   857	sub phonedirectory {
   858	
   859	my @temp;
   860	
   861	open INFILE, "$DATABASE";
   862	
   863	while ($line = <INFILE>)
   864	  {
   865	  chomp $line;
   866	  @f = split /\^/, $line;
   867	
   868	  if ($f[0] ne '999') {push @temp, "$f[2]^$f[6]";}
   869	
   870	  }
   871	close INFILE;
   872	@temp = sort @temp;
   873	open OUTFILE, '>phone.html';
   874	
   875	print OUTFILE <<HTML;
   876	<html><head><title>James White Library Telephone Directory</title></head>
   877	<!-- From a database by Steve Sowder  -->
   878	<body><h2>Library Phone Directory</h2>
   879	<table width="727" border="0" cellspacing="1" cellpadding="1">
   880	HTML
   881	 
   882	foreach $line (@temp)
   883	  {
   884	  ($name,$phone) = split /\^/, $line;
   885	  $phone =~ s!\(269\) 471-!!g;
   886	
   887	  print OUTFILE <<DATALINE;
   888	<tr><td width="150">$name</td><td>x$phone</td></tr>
   889	DATALINE
   890	  }
   891	
   892	&gettime;
   893	print OUTFILE <<HTML;
   894	</table><p>Updated $MONTH/$DAY/$YEAR
   895	</body></html>
   896	HTML
   897	
   898	close OUTFILE;
   899	
   900	}  # end phonedirectory
   901	
   902	#############################
   903	sub emaildirectory  {
   904	
   905	my @temp;
   906	
   907	open INFILE, "$DATABASE";
   908	
   909	while ($line = <INFILE>)
   910	  {
   911	  chomp $line;
   912	  @f = split /\^/, $line;
   913	
   914	  if ($f[11] !~ /Y/i and $f[0] ne '999') {push @temp, "$f[2]^$f[6]^$f[7]";}
   915	
   916	  }
   917	close INFILE;
   918	@temp = sort @temp;
   919	open OUTFILE, '>emails.html';
   920	
   921	print OUTFILE <<HTML;
   922	<html><head><title>James White Library Email Directory</title></head>
   923	<!-- From a database by Steve Sowder  -->
   924	<body><h2>Library Email Directory</h2>
   925	<table width="727" border="0" cellspacing="1" cellpadding="1">
   926	HTML
   927	
   928	
   929	foreach $line (@temp)
   930	  {
   931	  ($name,$phone,$email) = split /\^/, $line;
   932	  $phone =~ s!\(269\) 471-!!g;
   933	
   934	  print OUTFILE <<DATALINE;
   935	<tr><td width="150">$name</td><td width="100">$phone</td><td>$email</td></tr>
   936	DATALINE
   937	  }
   938	
   939	&gettime;
   940	print OUTFILE <<HTML;
   941	</table><p>Updated $MONTH/$DAY/$YEAR
   942	</body></html>
   943	HTML
   944	
   945	close OUTFILE;
   946	
   947	
   948	}  # end emaildirectory
   949	
   950	
   951	#############################
   952	# make backup if necessary
   953	sub makebackup {
   954	
   955	($DAY, $MONTH, $YEAR) = (localtime)[3,4,5];
   956	
   957	#print "finis local time1\n";
   958	
   959	$M=$MONTH;   #bidwell fix
   960	
   961	$MONTH++;
   962	$YEAR = $YEAR + 1900;
   963	
   964	if (length($MONTH) < 2) {$MONTH = '0' . $MONTH}
   965	if (length($DAY) < 2) {$DAY = '0' . $DAY}
   966	
   967	$backupfile = "$DATABASE." . $YEAR . $MONTH . $DAY;
   968	
   969	open BACKUPFILE, "$backupfile";
   970	$getit = <BACKUPFILE>;
   971	close BACKUPFILE;
   972	
   973	chomp $getit;
   974	
   975	if ($backupfile =~ /(.+)/)  {$backupfile = $1; }  # to untaint file name
   976	
   977	
   978	if (length($getit) == 0)
   979	   {
   980	   open INFILE, "$DATABASE";
   981	   open BACKUP, ">$backupfile";
   982	   while ($line = <INFILE>) {print BACKUP "$line"}
   983	   close INFILE;
   984	   close BACKUP;
   985	#   system "cp sailtitles.dat $backupfile";  # even untainted this doesn't work
   986	   }
   987	
   988	
   989	} # end make back up
   990	#################################
   991	sub gettime {
   992	
   993	($DAY, $MONTH, $YEAR) = (localtime)[3,4,5];
   994	
   995	#print "finis local time1\n";
   996	
   997	$M=$MONTH;   #bidwell fix
   998	
   999	$MONTH++;
  1000	$YEAR = $YEAR + 1900;
  1001	
  1002	if (length($MONTH) < 2) {$MONTH = '0' . $MONTH}
  1003	if (length($DAY) < 2) {$DAY = '0' . $DAY}
  1004	
  1005	
  1006	}
  1007	
  1008	########################################################
  1009	#  badkarma
  1010	sub badkarma {
  1011	
  1012	print <<KILLME;
  1013	<body bgcolor="red">
  1014	<center>
  1015	<h3>Sorry
  1016	<br>According to our files
  1017	<br>you are not allowed to run
  1018	<br>this screen
  1019	<p>If you believe this is in error
  1020	<br>please contact the
  1021	<br>system librarian
  1022	</h3>
  1023	</center>
  1024	$ra
  1025	</body></html>
  1026	KILLME
  1027	}  # end of badkarma   (we hope!)
  1028	
  1029	
  1030	
  1031	##########################
  1032	sub loadconfig {
  1033	
  1034	while (my $data = <DATA>)
  1035	  {
  1036	  if ($data !~ /^\#/)
  1037	    {
  1038	    chomp $data;
  1039	#print "<br>lc: $data\n";
  1040	    if ($data =~ /dataname/i)  {$DATANAME = substr($data,9) }
  1041	    if ($data =~ /homebase/i)  {&splitonblank ($data, $HOMEBASE) }
  1042	    if ($data =~ /database/i)  {&splitonblank ($data, $DATABASE) }
  1043	    if ($data =~ /keylength/i) {&splitonblank ($data, $KEYLENGTH) }
  1044	    if ($data =~ /systemsip/i) {&splitonblank ($data, $SYSTEMSIP) }
  1045	    if ($data =~ /userip/i)    {&splitonblank ($data, $USERIP) }  # multiple users?
  1046	    if ($data =~ /layout/i) 
  1047	       {
  1048	       while ($data !~ /endlayout/i)
  1049	         { 
  1050	         $data = <DATA>;
  1051	         chomp $data;
  1052	#print "<br>lc: $data\n";
  1053	
  1054	         my @f = split /\^/, $data;
  1055	
  1056	         push @FIELDS, $f[1];
  1057	         push @DISPLAY, $f[2];
  1058	         push @SECURITY, $f[3];
  1059	         push @DATATYPE, $f[4];
  1060	         push @DATACASE, $f[5];
  1061	
  1062	#         $FIELDS[$f[0]] = $f[1];
  1063	#         $DISPLAY[$f[0]] = $f[2];
  1064	#         $SECURITY[$f[0]] = $f[3]; # O - open; D - no changes; S- open to systems only
  1065	         }
  1066	       }
  1067	    }
  1068	  }
  1069	
  1070	}
  1071	################
  1072	sub verifyconfig {
  1073	
  1074	my $knt = 0;
  1075	if (length($HOMEBASE) < 1) {print "no homebase\n"; $knt++ }
  1076	if (length($KEYLENGTH) < 1) {print "keylength zero\n"; $knt++ }
  1077	if (length($DATABASE) < 1) {print "no databased named\n"; $knt++ }
  1078	if (length($SECURITY[1]) < 1) {print "no security fields\n"; $knt++}
  1079	my $dknt = @FIELDS;
  1080	if ($dknt < 3) {print "no data layout\n"; $knt++}
  1081	
  1082	if ($knt > 0) {die}
  1083	
  1084	}
  1085	################
  1086	sub splitonblank {
  1087	
  1088	$_[0] =~ tr/ / /s;     # remove multiple blanks
  1089	
  1090	my @f = split /\s/, $_[0];
  1091	@_[1] = $f[1];
  1092	
  1093	#print "dbsub: $_[0]<->$_[1]\n";
  1094	
  1095	return 0;
  1096	
  1097	}
  1098	#########################
  1099	sub verifysecurity {
  1100	$ra = $ENV{'REMOTE_ADDR'};
  1101	
  1102	$host=$ENV{'REMOTE_ADDR'};
  1103	if ($ENV{'HTTP_X_FORWARDED_FOR'} ne ""){
  1104	    (@list)=split(/,/,$ENV{'HTTP_X_FORWARDED_FOR'});
  1105	    $host = @list[$#list];
  1106	    $ra=@list[0];
  1107	    }
  1108	
  1109	my $badkarma = 'bad news';
  1110	
  1111	$SYSTEMSUSER = 'N';
  1112	if ($ra eq $SYSTEMSIP) {$badkarma = 'good'; $SYSTEMSUSER = 'Y' }  
  1113	if ($ra eq $USERIP) {$badkarma = 'good';  }   
  1114	
  1115	### TYPE OF ACCESS  <<<<<<<<<<<<<<<<<<<<<<<???????????????????
  1116	
  1117	if ($badkarma =~ /bad/)
  1118	  {
  1119	  &badkarma;
  1120	  die;
  1121	  }
  1122	
  1123	}
  1124	
  1125	
  1126	#################
  1127	__DATA__
  1128	dataname: STAFF DATABASE
  1129	homebase:  http://www.andrews.edu/library/staff/staff.cgi
  1130	database: staff.dat
  1131	keylength: 3
  1132	
  1133	systemsIP: 143.207.14.30   #sowder
  1134	userIP:    143.207.14.159  #touchard
  1135	#userIP:    143.207.14.180  #test number
  1136	
  1137	## database: <number>^<name>^<display>^<security (D|O|S)>^<type (T|A)>^<case (b|U)>
  1138	layout:
  1139	0^number^Number^D^T^
  1140	1^date^Date^D^T^
  1141	2^name^Name^O^T^
  1142	3^title^Title^O^T^
  1143	4^rank^Rank^O^T^
  1144	5^room^Room^O^T^
  1145	6^phone^Phone^O^T^
  1146	7^email^Email^O^T^
  1147	8^home^HomePage^O^T^
  1148	9^interest^Interests^O^T^
  1149	10^pic^Photo^O^T^
  1150	11^phonedir^Phone Dir Only?^O^T
  1151	endlayout
  1152	__END__
  1153