root/tags/ccbbs-1.3/bbs.cgi

#!/usr/bin/perl
#
# �~�X�f����rev 1.3
#
# ���̃t�@�C���͎��Ȃ��N���v�g�ł��B
# �ݒ� conf.cgi �ōs���܂��B
#
# �g����  HTML�ɋL�q�����O�̕��@ 
#     <!--#include virtual="�p�X/bbs.cgi?mode=latest" --> 
#   �L�q��
#     <!--#include virtual="./cgi-bin/ccbbs/bbs.cgi?mode=latest" --> 
#   �f���‚ɒ��ڃ����N������
#     <a href="http://..../cgi-bin/ccbbs/bbs.cgi?mode=logview">BBS</a>
#   �������݂̊Ǘ�
#     �f���‰�����dmin�����N����ĉ������B
#
# �~�ϑ���l�i���̃T�C�g�j
# http://www.akiyan.com/
#
# �Ƃقق�SI�� http://tohoho.wakusei.ne.jp/wwwssi.htm
#
# �X�V���� 2003-03-18 rev1.3 conf.cgi�̋L�q�~�X����B
# 2003-02-10 rev1.2 �Ǘ����O�C���y�[�W�̋L�q�~�X����B
# 2003-02-02 rev1.1 ��B
#
require 'conf.cgi';
require 'jcode.pl';
&get_query_string();

        $conf{'maxlog'}--;
        $admin_style = <<"EOM";
h1,h2 { 
 font-size:100%;
 font-weight:bold;
 margin:0;
}
body {
 font-size:82%;
 padding:1%;
}
thead {
 font-weight:bold;
}
tbody {
 font-weight:normal;
}
td {
 border-width:0 0 1px 0;
 border-style:dotted;
 border-color:#888;
 margin:0;
 word-break:break-all;
}
EOM
        $MODE   = $FORM{'mode'};
        $ACTION = $FORM{'action'};
        $LOG_FILENAME = './log.cgi';
        @LOG_FORMAT = ('status', 'number' ,'name' ,'text' ,'time' , 'host', 'referer', 'email', 'url');
        $LOG_CUTSTR = '<>';
        if ($MODE eq '') {
                $conf{'charset'} = 'sjis';
                &put(&login());
                exit;
        }
        &loadlog();
        if ($MODE eq 'write') {
                &write();
                print "location: $conf{'return_url'}\n\n";
                exit;
        }
        if ($MODE eq 'logview') {
                $conf{'charset'} = 'sjis';
                $conf{'viewline'} = $conf{'viewline_logview'};
                &put(&latest());
                exit;
        }
        if ($MODE eq 'latest') {
                &put(&latest());
                exit;
        }
        if ($MODE eq 'admin') {
                $conf{'charset'} = 'sjis';
                if ($FORM{'password'} eq $conf{'password'}) {
                        &put(&admin());
                } else {
                        &put(&login('<p style="color:#a00">�p�X���[�h���Ⴂ�܂��B</p>'));
                }
                exit;
        }
        exit;

###
# ���O��b�V���̔z��i�[ / ���O�ۑ��ő匏���`�F�b�N�K��
sub loadlog
{
        local($num, $row, $log_src, $array, $key, $value, $num_active);
        @LOG = ();
        @LOG_ALL = ();
        @log_src = file($LOG_FILENAME);
        if ($#log_src > $conf{'maxlog'}) {
                open(OUT, "+< $LOG_FILENAME");
                eval { flock(OUT, 2);    };
                eval { truncate(OUT, 0); };
                eval { seek(OUT, 0, 0);  };
                for($num = 1; $num <= $#log_src; $num++) {
                        print(OUT $log_src[$num]);
                }
                close(OUT);
                @log_src = file($LOG_FILENAME);
        }
        @log_src = reverse(@log_src);
        $num_active = 0;
        for ($num = 0; $num <= $#log_src; $num++) {
                my $data;
                $row = $log_src[$num];
                $row =~ s/\r\n/\n/;
                $row =~ s/\n//;
                @array = split(/$LOG_CUTSTR/, $row);
                @data = &format_hash(*LOG_FORMAT, *array);
                ($data{'sec'}
                ,$data{'min'}
                ,$data{'hour'}
                ,$data{'mday'}
                ,$data{'mon'}
                ,$data{'YEAR'}
                ,$data{'wday'}
                ,$data{'yday'}
                ,$data{'isdst'}) = localtime($data{'time'});
                $data{'YEAR'} += ($data{'YEAR'} < 1900) ? 1900 : 0;
                $data{'year'} = substr($data{'YEAR'}, 2);
                $data{'mon'}  = &enforce_figure($data{'mon'} + 1, 2);
                $data{'mday'} = &enforce_figure($data{'mday'}, 2);
                $data{'hour'} = &enforce_figure($data{'hour'}, 2);
                $data{'min'}  = &enforce_figure($data{'min'}, 2);
                $data{'sec'}  = &enforce_figure($data{'sec'}, 2);
                if ($data{'email'}  ne '') {
                        $data{'name'} = '<a href="mailto:' . $data{'email'} . '">' . $data{'name'} . '</a>';
                }
                if ($data{'url'} ne '') {
                        $data{'url_link'} = &replace_hash(*data, $conf{'html_url'});
                } else {
                        $data{'url_link'} = '';
                }
                while ( ($key, $value) = each %data) {
                        $LOG_ALL[$num]{$key} = $value;
                }
                if ($data{'status'} == 0) {
                        while ( ($key, $value) = each %data) {
                                $LOG[$num_active]{$key} = $value;
                        }
                        $num_active++;
                }
        }
}

sub put
{
        local($html) = @_;
        if ($conf{'charset'} ne "" && $conf{'charset'} ne "sjis") {
                &jcode'convert(*html, $conf{'charset'});
        }
        print $html;
}

sub latest
{
        local($num, $hash_grob, $html, $contents, $option, $start, $body);
        $hash_grob = '';
        $contents{'navi'}  = '';
        $contents{'message_list'}  = '';
        $html = &content_type('text/html');
        my $view_count = 0;
        $start = ( $FORM{'start'} > 0 ) ? $FORM{'start'} : 0;
        for ($num = $start; $num <= $#LOG; $num++) {
                if ($conf{'autolink'}) {
                        $LOG[$num]{'text'} = &auto_link($LOG[$num]{'text'}, $conf{'urlreplace'}, $conf{'target'});
                }
                $hash_grob = $LOG[$num];
                $contents{'message_list'} .= &replace_hash($hash_grob, $conf{'html_message'});
                $view_count++;
                if ($view_count == $conf{'viewline'}) {
                        if ($num < $#LOG && $MODE eq 'logview') {
                                $option{'start'}  = $FORM{'start'} + $conf{'viewline_logview'};
                                $contents{'navi'} = $conf{'html_navi'};
                                $contents{'navi'} = &replace_hash(*conf,   $contents{'navi'});
                                $contents{'navi'} = &replace_hash(*option, $contents{'navi'});
                        }
                        $num = $#LOG;
                }
        }
        if ($MODE eq 'logview') {
                $body{'body'} = $conf{'html_body'};
                $body{'body'} = &replace_hash(*conf    , $body{'body'});
                $body{'body'} = &replace_hash(*contents, $body{'body'});
                $html .= $conf{'html_logview'};
                $html = &replace_hash(*body,     $html);
                $html = &replace_hash(*conf,     $html);
        } else {
                $html .= $conf{'html_body'};
                $html = &replace_hash(*conf,     $html);
                $html = &replace_hash(*contents, $html);
        }
        return($html);
}

sub write
{
        local(@data, $wdata, $first, $row);
        $wdata = '';
        $first = 1;
        $data{'number'}  = &select_max(*LOG_ALL, 'number') + 1;
        $data{'name'}    = &real_html($FORM{'name'});
        if($conf{'nobreak'}) {
                $FORM{'text'} = &nobreak($FORM{'text'});
        }
        $data{'text'}    = &real_html($FORM{'text'});
        $data{'time'}    = &gettime($conf{'timediff'});
        $data{'status'}  = 0;
        $data{'host'}    = ($ENV{'REMOTE_HOST'} ne '') ? $ENV{'REMOTE_HOST'} : $ENV{'REMOTE_ADDR'};
        $data{'referer'} = $ENV{'HTTP_REFERER'};
        $data{'email'}   = &secure_value(&real_html($FORM{'email'}));
        $data{'url'}     = &secure_value(&real_html($FORM{'url'}));

        if ($data{'name'} eq "") {
                &error('���O��������܂���);
                exit;
        }
        if ($data{'text'} eq "") {
                &error('���b�Z�[�W��������܂���);
                exit;
        }
        if (length($data{'name'} . $data{'text'}) > $conf{'maxlength'}) {
                &error('��\�ȍő������́A�S�ĕ����� . $conf{'maxlength'} . '�o�C�g�܂łł��B');
                exit;
        }
        if ((time() - (stat($LOG_FILENAME))[9]) <= $conf{'stoptime'}) {
                &error($conf{'stoptime'} . '�b�ȓ��A���������݂͋֎~�������܂��B');
                exit;
        }
        foreach $row (@LOG_FORMAT) {
                $wdata .= ($first != 1) ? $LOG_CUTSTR : '';
                $wdata .= $data{$row};
                $first = 0;
        }
        open(OUT, ">> $LOG_FILENAME");
        eval { flock(OUT, 2); };
        print(OUT "$wdata\n");
        close(OUT);
}

sub login
{
        local($message) = @_;
        if ($conf{'password'} eq '') {
                $message .= '<p><strong style="color:#a00">�y�x���z</strong>�p�X���[�h���ݒ肳�����܂���onf.cgi��W���ăp�X���[�h��肵�Ă��������B�i���̂܂܃{�^������΃��O�C���͏o���܂��j</p>';
        }
        $html = &content_type('text/html');
        $html .= &html_header($conf{'title'}.' �Ǘ����O�C��',$admin_style);
        $html .= <<"EOM";
<h1>$conf{'title'} �Ǘ����O�C��</h1>
<hr>
<form action="$conf{'cgi'}" method="post" name="login">
$message
<p>Password:<input type="password" size="9" name="password"><input type="hidden" name="mode" value="admin"> <input type="submit" name="submit" value="���O�C��"></p>
</form>
<hr>
<p style="text-align:right"><a href="$conf{'cgi'}?mode=logview">logview</a> / Script made by <a href="http://www.akiyan.com/">�~�ϑ���l</a></p>
</body>
</html>
EOM
        return($html);
}

sub admin
{
        local($html, $contents, $num, $hash_grob, $wdata, $start, $nextstart);
        if (($ACTION eq 'delete' || $ACTION eq 'revival') && $FORM{'number'} ne '') {
                open(OUT, "+< $LOG_FILENAME");
                eval { flock(OUT, 2);    };
                eval { truncate(OUT, 0); };
                eval { seek(OUT, 0, 0);  };
                for ($num = $#LOG_ALL ;$num >= 0; $num--) {
                        if($LOG_ALL[$num]{'number'} eq $FORM{'number'}) {
                                if ($ACTION eq 'delete') {
                                        $LOG_ALL[$num]{'status'} = 1;
                                } else {
                                        $LOG_ALL[$num]{'status'} = 0;
                                }
                        }
                        $first = 1;
                        $wdata = '';
                        foreach $row (@LOG_FORMAT) {
                                $wdata .= ($first != 1) ? $LOG_CUTSTR : '';
                                $wdata .= $LOG_ALL[$num]{$row};
                                $first = 0;
                        }
                        print(OUT "$wdata\n");
                }
                close(OUT);
                &loadlog();
        }
        $html = &content_type('text/html');
        $html .= &html_header($conf{'title'}.' �Ǘ�', $admin_style);
        $contents{'message_list'} = '';
        my $view_count = 0;
        $start = ( $FORM{'start'} > 0 ) ? $FORM{'start'} : 0;
        for ($num = $start; $num <= $#LOG; $num++) {
                $hash_grob = $LOG[$num];
                $contents{'message_list'} .= &replace_hash($hash_grob, "<tr><td>{number}</td><td>{name}</td><td>{text}{url_link}</td><td>{YEAR}/{mon}/{mday} {hour}:{min}</td><td>{host}�@</td></tr>");
                $view_count++;
                if ($view_count == $conf{'viewline_logview'}) {
                        if ($num < $#LOG) {
                                $nextstart  = $start + $conf{'viewline_logview'};
                                $contents{'navi'} = <<"EOM";
<form action="$conf{'cgi'}" name="next" method="post">
<p><input type="hidden" name="mode" value="admin"><input type="hidden" name="start" value="$nextstart"><input type="hidden" name="password" value="$conf{'password'}"><input type="submit" name="submit" value="next"></p>
</form>
EOM
                        }
                        $num = $#LOG;
                }
        }
        $html .= <<"EOM";
<h1>$conf{'title'} �Ǘ�</h1>
<hr>
<table border="0" style="width:100%">
<thead>
<tr><td style="width:4ex">No.</td><td style="width:16ex">Name</td><td>Message</td><td style="width:18ex">Timestamp</td><td style="width:20ex">Host</td></tr>
</thead>
<tbody>
$contents{'message_list'}
<tbody>
</table>
$contents{'navi'}
<div style="margin-top:1em">
<form action="$conf{'cgi'}" method="post" name="ob">
Name:<input type="text" name="name" size="8">
 E-Mail:<input type="text" name="email" size="12"><br>
Message:<br>
<textarea name="text" cols="40" rows="4"></textarea><br>
URL:<input type="text" name="url" size="20"> <input type="submit" value="write">
<input type="hidden" name="mode" value="write">
</form>
</div>
<div style="text-align:right">
<form action="$conf{'cgi'}" name="delete" method="post" style="display:inline;margin-left:1em">
<input type="hidden" name="mode" value="admin"><input type="hidden" name="action" value="delete"><input type="hidden" name="password" value="$conf{'password'}">Delete No.<input type="text" name="number" size="4"><input type="submit" name="submit" value="delete">
</form>
<form action="$conf{'cgi'}" name="revival" method="post" style="display:inline;margin-left:1em">
<input type="hidden" name="mode" value="admin"><input type="hidden" name="action" value="revival"><input type="hidden" name="password" value="$conf{'password'}">Revival No.<input type="text" name="number" size="4"><input type="submit" name="submit" value="Revival">
</form>
</div>
<hr>
<p style="text-align:right"><a href="$conf{'cgi'}?mode=logview">logview</a> / Script made by <a href="http://www.akiyan.com/">�~�ϑ���l</a></p>
</body>
</html>
EOM
        return($html);
}

sub error
{
        local($message) = @_;
        local($html);
        $html = &content_type('text/html');
        $html .= &html_header($conf{'title'} . ' �G���[', $admin_style);
        $html .= <<"EOM";
<h1>$conf{'title'} �G���[</h1>
<hr>
<p style="color:#a00">$message</p>
<p><a href="$conf{'return_url'}">Return</a></p>
<hr>
EOM
        $html .= &html_futter();
        &put($html);
        exit;
}

#____�T�u���[�`���Q

###
# �N�G���[������ǂݍ���
#
# @return void
#
sub get_query_string
{
        local($conv) = @_;
        local($a, $name, $value, $query_string);
        if ($ENV{'REQUEST_METHOD'} eq "POST") {
                read(STDIN, $query_string, $ENV{'CONTENT_LENGTH'});
        } else {
                $query_string = $ENV{'QUERY_STRING'};
        }
        @a = split(/\&/, $query_string);
        foreach $a (@a) {
                ($name, $value) = split(/=/, $a);
                $value =~ tr/+/ /;
                $value =~ s/%([0-9a-fA-F][0-9a-fA-F])/pack("C", hex($1))/eg;
                if ( $conv ne "" ) {
                        &jcode::convert(\$value,$conv);
                }
                $FORM{$name} = $value;
        }
}

###
# �N�b�L�[��ݍ���
#
# @return void
#
sub get_cookie {
    local($row, $name, $value);
    foreach $row (split(/; */, $ENV{'HTTP_COOKIE'})) {
        ($name, $value) = split(/=/, $row);
        $value =~ s/%([0-9A-Fa-f][0-9A-Fa-f])/pack("C", hex($1))/eg;
        $COOKIE{$name} = $value;
    }
}


###
# content-type�w�b�_
# @param string
#
# @return string
#
sub content_type
{
        if ($_content_type_printed) {
                return("");
        }
        $_content_type_printed = 1;
        return("Content-type: $_[0]\n\n");
}

###
# HTML�w�b�_
#
# @return string
#
sub html_header
{
        local($title,$style) = @_;
        return <<"EOM";
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html lang="ja">
<head>
<meta http-equiv="content-type" content="text/html; charset=shift_jis">
<meta http-equiv="content-style-type" content="text/css">
<style type="text/css">
$style
</style>
<title>$title</title>
</head>
<body>
EOM
}

###
# HTML�t�b�^
#
# @return string
#
sub html_futter
{
        return <<"EOM";
</body>
</html>
EOM
}

###
# {}�Ɉ͂܂ꂽ�L�[��b�V���Œu��
#
# @param *hash �u�������[�ƒl
# @param string �u���Ώ�
#
# @return string �u���ς̑Ώ�
#
sub replace_hash
{
        local(*hash, $body) = @_;
        local($key, $value);
        while ( ($key, $value) = each %hash) {
        $body =~ s/\{$key\}/$value/g;
        }
        return($body);
}

###
# �t�@�C����ݍ���z��i�[
# @param string �t�@�C����
#
# @return array �t�@�C����
#
sub file
{
        local($filename) = @_;
        local($row, @data);
        if(!open(IN, "< $filename")) {
                print &content_type('text/html');
                print "file does not open '$filename'";
                exit;
        }
        eval { flock(IN, 1); };
        @data = <IN>;
        eval { flock(IN, 8); };
        close(IN);
        return(@data);
}

###
# ����[�Ƃ��A����Ƃ��ăn�b�V�����
# @param *array ���O
# @param *array �l
#
# @return hash
#
sub format_hash
{
        local(*key, *value) = @_;
        local($num, @data);
        for ($num = 0; $num <= $#key; $num++) {
                $data{$key[$num]} = $value[$num];
        }
        return(@data);
}

sub enforce_figure
{
        local($string, $figure) = @_;
        return(substr('0000000000000000' . $string, 16 + length($string) - $figure, $figure));
}

###
# �n�b�V���̔z�����t�B�[���h�������𓾂�# @param *hash_array �n�b�V���̔z�� @param string �I����B�[���h��
#
# @return int �ő�
#
sub select_max
{
        local(*data, $name) = @_;
        local($num, $max_num) = (0, 0);
        for ($num = 0; $num <= $#data; $num++) {
                $max_num = ($data[$num]{$name} > $max_num) ? $data[$num]{$name} : $max_num;
        }
        return $max_num;
}

###
# ���݂̎������
# @param int ����
#
# @return int
#
sub gettime
{
        local($timediff) = @_;
        return(time() + $timediff);
}

###
# ��ԎQ�Ƃɒu��
# @param string
#
# @return string
#
sub real_html
{
        local($html) = @_;
        $html =~ s/&/&amp\;/g;
        $html =~ s/"/&quot\;/g;
        $html =~ s/\</&lt\;/g;
        $html =~ s/\>/&gt\;/g;
        $html =~ s/\r\n/\n/g;
        $html =~ s/\n/\<br\>/g;
        return($html);
}

###
# �Z�L�����e�B�΍�{�����l�ɒu��
# @param string
#
# @return string
sub secure_value
{
        local($value) = @_;
        $value =~ s/\"/&#34\;/g;
        $value =~ s/\'/&#39\;/g;
        $value =~ s/\@/&#64\;/g;
        return($value);
}

###
# �ϐ���t/html�ŏo�͂���# @param mixed
#
# @return void
#
sub var_dump
{
        local($var) = @_;
        print &content_type('text/html');
        print $var . "\n";
}

###
# URL�̎��������N
# @param string ���������N���镶���� @param string �u����������
# @return string a href���t����ꂽ������
sub auto_link {
        local($html, $replace_word, $target) = @_;
        if ($target ne '') {
                $target = " target=\"$target\"";
        }
        if ($replace_word ne "") {
                $html =~ s/([^=^\"]|^)(http\:[\w\.\~\-\/\?\&\+\=\:\@\%\;\#\%]+)/$1<a href=\"$2\" title=\"$2\"$target>$replace_word<\/a>/g;
        } else {
                $html =~ s/([^=^\"]|^)(http\:[\w\.\~\-\/\?\&\+\=\:\@\%\;\#\%]+)/$1<a href=\"$2\"$target>$2<\/a>/g;
        }
        return($html);
}

###
# ��X�y�[�X�ɒu��
# @param string
# 
# @return string
sub nobreak
{
        local($html) = @_;
        $html =~ s/\r\n/\n/g;
        $html =~ s/\n/ /g;
        return($html);
}