Announcements

#!/usr/bin/perl -Tw ############################################################################# # 12-1-2005 Added check email code # # 12-3-2005 Added check grammar code # # 02-2014 Added check guess code # ############################################################################# $announce_file = '/home/essenba/public_html/comments/announcements.txt'; $announce_log = '/home/essenba/public_html/comments/logannouncements.txt'; $max_entries = 0; # how many guestbook entries to save? # set to '0' (zero) for infinite entries... use CGI; use Fcntl; $query = new CGI; unless ($action = $query->param('action')) { $action = 'none'; } ############################################################################# # Create header # ############################################################################# print <<"Headerinfo"; Content-type: text/html Announcements News and Announcements for Old line Primitive Baptists
(Any church related news such as: meetings,ordinations,prayer requests)
Home Page

Click to add News or Announcements
(Guess Code = 500)

History-News & Announcments

Headerinfo ############################################################################# # Process the form submission and assemble the Announcement entry # ############################################################################# if ($action eq 'Add Announcement') { my ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time); $year = $year+1900; $mon = $mon+1; $gcode = $query->param('gcode'); $name = $query->param('name'); $city = $query->param('city'); $state = $query->param('state'); $country = $query->param('country'); $email = $query->param('email'); $comment = $query->param('comment'); $remote_addr = $ENV{"REMOTE_ADDR"}; $remote_host = $ENV{"REMOTE_HOST"}; ############################################### # Check guess code and remote host name # ############################################### unless ($gcode =~/500/) { die "Incorrect Guess Code\n";} if ($gcode != 500) { die "Incorrect Guess Code\n";} if($remote_host=~//) { die "Unathorized:$remote_host\n";} ############################################### # Check for null email and name # ############################################### if (length($email) > 0 ) { $email = "Email = $email"; } unless ($name) { die "No name: $name\n"; } if ($city =~ /Unknown/) { die "unauthorized name:$city\n"; } # untaint variable unless ($email =~ /^([^<]*)$/) { die "couldn't untaint email: $email\n"; } # check email if ($email =~ /tony_d|a_ray|DarkSites|greg_2000|myrealbox/) { die "Unauthorized user: $email\n"; } ####################################### # Check and clean up $name # ####################################### if ($name =~ /Alexjbr|Alexufc|Alexbif|Alexnsd|Alexzbb|sex|lesbian|Alexqpm|Alexrcm|Alex/) { die "unauthorized name:$name\n"; } unless ($name) { $name = 'Anonymous'; # no name given } if (length($name) > 50) { $name = 'Unrealistic long name given'; } # disable all HTML tags in $name $name =~ s/ 115) { $from_where = 'Unrelistic long location name'; } # disable HTML tags $from_where =~ s/ 32768) { $comment = '...Announcement exceeds 32768 Character..redo.'; } unless ($comment) { $comment = '...No announcement'; die "couldn't untaint comment: $comment\n"; } # fix line-endings $comment =~ s/\r\n?/\n/g; # lose HTML tags $comment =~ s/ $mon/$mday/$year $hour:$min:$sec:EST
Submitted by $name from $from_where:

$comment

Newentry ############################################################################# # Open non-destructively, read old entries, writeout new # ############################################################################# $all_entries .= $entry; sysopen(ENTRIES, "$announce_file", O_RDWR) or die "can't open $announce_file: $!"; flock(ENTRIES, 2) or die "can't LOCK_EX $announce_file: $!"; while() { $all_entries .= $_; } if ($max_entries) { # use shift to lop the head off the guestbook, if necessary # use pop to lop the bottom of the guestbook, if necessary @all_entries = split(/

/i, $all_entries); $entry_count = @all_entries - 1; while ($entry_count > $max_entries) { pop @all_entries; $entry_count = @all_entries - 1; } $all_entries = join('

', @all_entries); } # now write out to $announce_file seek(ENTRIES, 0, 0) or die "can't rewind $announce_file: $!"; truncate(ENTRIES, 0) or die "can't truncate $announce_file: $!"; print ENTRIES $all_entries or die "can't print to $announce_file: $!"; close(ENTRIES) or die "can't close $announce_file: $!"; ######################################################################## # Write to announcements log file # ######################################################################## open(ENTRIES, ">> $announce_log") or die "can't open $announce_log: $!"; flock(ENTRIES, 2) or die "can't LOCK_EX $announce_log: $!"; print ENTRIES $entry or die "Can't Print to $announce_log: $!"; close (ENTRIES); } ############################################################################# # display the updated announcements # ############################################################################# open (IN, "$announce_file") or die "Can't open $announce_file for reading: $!"; flock(IN, 1) or die "Can't get LOCK_SH on $announce_file: $!"; while () { print; } close IN or die "Can't close $announce_file: $!"; ############################################################################# # display input announcements form # ############################################################################# print <<"Announcements_form";
Essential Baptist Principles

* Announcements_form

GuessCode:
Name:
City:
State:
Country:
Email:
Announcements and or News: