#!/usr/bin/perl  
###############################################################################
# Guestbook.cgi                                                               #
###############################################################################
# YaBB: Yet another Bulletin Board                                            #
# Open-Source Community Software for Webmasters                               #
# Version:        YaBB 1 Gold - SP 1.1                                        #
###############################################################################
#                      Wrote it by Xtrasweetgurl aka Lauren                   #
#           with assistance from the Boardmod community.                      #
#      Guestbook Version 1.0v3                                                #
###############################################################################

require "$sourcedir/Guestbook.cgi"; 

	### User Templates ###
	if(!$tmplfile || !-e("$templatesdir/$tmplfile")) { $tmplfile = "default.html"; }
	if(!-e("$templatesdir/$tmplfile")) { $templatesdir = "$boarddir"; $tmplfile = "template.html"; }

	fopen(TEMPLATE,"$templatesdir/$tmplfile") || die("$txt{'23'}: $tmplfile.html");
#	fopen(TEMPLATE,"template.html") || die("$txt{'23'}: template.html");
	###/User Templates ###

	@yytemplate = <TEMPLATE>;
	fclose(TEMPLATE);
 
sub gadd {  
$yytitle = "$gbooktxt{'01'}"; 
$yymain .= qq~ 
  
 <center>
<table width="92%" align="center" border="0">
  <tr>
    <td><font size="2">
    
<table  width="90%" align="center" cellpadding=0 cellspacing=0>
  <tr>
    <td valign=bottom colspan="2">
    <font size=2 class="nav"><B><img src="$imagesdir/open.gif" border=0>&nbsp;&nbsp;
    <a href="$scripturl" class="nav">$mbname</a><br>
    <img src="$imagesdir/tline.gif" border=0><IMG SRC="$imagesdir/open.gif"  border=0>&nbsp;&nbsp;
    <a href="$scripturl?action=gview" class="nav">$gbooktxt{'02'}
</a><br>
    <img SRC="$imagesdir/tline.gif" border=0><IMG SRC="$imagesdir/open.gif" border=0>&nbsp;&nbsp;
    $gbooktxt{'03'} ( <i>$gbooktxt{'03'}</i> )</td>
  </tr>
</table>

<table border=0 width="90%" cellspacing="1" cellpadding="0" bgcolor="$color{'bordercolor'}" class="bordercolor" align="center">
  <tr>
    <td bgcolor="$color{'bordercolor'}">
<form action="$cgi;action=gadd2" method="POST">
<script language="JavaScript1.2" src="$ubbcjspath" type="text/javascript"></script>
    <table class="titlebg" bgcolor="$color{'titlebg'}" width="100%">
      <tr>
      <td><font size=2 class="text1" color="$color{'titletext'}"><b>$gbooktxt{'03'}</b></font></td>
      </tr>
    </table>
    </td>
  </tr><tr>
  <td bgcolor="$color{'bordercolor'}">
       <table width="100%" cellpadding="3" cellspacing="0" bgcolor="$color{'windowbg'}" class="windowbg">
      <tr>

 if($name) {$yymain .= qq~    <td class="windowbg" bgcolor="$color{'windowbg'}" width="23%"><font size=2><b>$txt{'35'}:</b></font></td>
   <td class="windowbg" bgcolor="$color{'windowbg'}"><input type="text" name="name" size="20"> </td>       ~;
 } else {

$yymain .= qq~
 <td class="windowbg" bgcolor="$color{'windowbg'}" width="23%"><font size=2><b>$txt{'35'}:</b></font></td>
   <td class="windowbg" bgcolor="$color{'windowbg'}"><font size=2><input type="hidden" name="name" value="$username" size="20"> <b><a href="$cgi;action=viewprofile;username=$username">$username</a></b>
</font></td>
      </tr>
 </table>
    </td>
   </tr>
  <tr>
    <td bgcolor="$color{'bordercolor'}">
    <table width="100%" cellpadding="3" cellspacing="0" bgcolor="$color{'windowbg2'}" class="windowbg2">
<tr>
</td>
      </tr>
      <tr>
        <td class="windowbg2" bgcolor="#F8F8F8" width="23%"><font size=2><b>$txt{'69'}:</b></font></td>
        <td valign=middle class="windowbg2" bgcolor="#F8F8F8">
<input type="text" name="email" size="60">
        </td>~; }

if($enable_ubbc && $showyabbcbutt) {
	$yymain .= qq~
      <tr>
        <td>$txt{'252'}</td>
        <td>
        <script language="JavaScript1.2" type="text/javascript">
        <!--
        if((navigator.appName == "Netscape" && navigator.appVersion.charAt(0) >= 4) || (navigator.appName == "Microsoft Internet Explorer" && navigator.appVersion.charAt(0) >= 4) || (navigator.appName == "Opera" && navigator.appVersion.charAt(0) >= 4) || (navigator.appName == "WebTV Plus Receiver" && navigator.appVersion.charAt(0) >= 3)) {
          document.write("<a href=javascript:bold()><img src='$imagesdir/bold.gif' align=bottom width=23 height=22 alt='$txt{'253'}' border=0></a>");
          document.write("<a href=javascript:italicize()><img src='$imagesdir/italicize.gif' align=bottom width=23 height=22 alt='$txt{'254'}' border='0'></a>");
          document.write("<a href=javascript:underline()><img src='$imagesdir/underline.gif' align=bottom width=23 height=22 alt='$txt{'255'}' border='0'></a>");
          document.write("<a href=javascript:strike()><img src='$imagesdir/strike.gif' align=bottom width=23 height=22 alt='$txt{'441'}' border='0'></a>");
          document.write("<a href=javascript:glow()><img src='$imagesdir/glow.gif' align=bottom width=23 height=22 alt='$txt{'442'}' border='0'></a>");
          document.write("<a href=javascript:shadow()><img src='$imagesdir/shadow.gif' align=bottom width=23 height=22 alt='$txt{'443'}' border='0'></a>");
          document.write("<a href=javascript:move()><img src='$imagesdir/move.gif' align=bottom width=23 height=22 alt='$txt{'439'}' border='0'></a>");
          document.write("<a href=javascript:pre()><img src='$imagesdir/pre.gif' align=bottom width=23 height=22 alt='$txt{'444'}' border='0'></a>");
          document.write("<a href=javascript:left()><img src='$imagesdir/left.gif' align=bottom width=23 height=22 alt='$txt{'445'}' border='0'></a>");
          document.write("<a href=javascript:center()><img src='$imagesdir/center.gif' align=bottom width=23 height=22 alt='$txt{'256'}' border='0'></a>");
          document.write("<a href=javascript:right()><img src='$imagesdir/right.gif' align=bottom width=23 height=22 alt='$txt{'446'}' border='0'></a>");
          document.write("<a href=javascript:hr()><img src='$imagesdir/hr.gif' align=bottom width=23 height=22 alt='$txt{'531'}' border='0'></a>");
          document.write("<a href=javascript:size()><img src='$imagesdir/size.gif' align=bottom width=23 height=22 alt='$txt{'532'}' border='0'></a>");
          document.write("<a href=javascript:font()><img src='$imagesdir/face.gif' align=bottom width=23 height=22 alt='$txt{'533'}' border='0'></a>");
          document.write("<a href=javascript:flash()><img src='$imagesdir/flash.gif' align=bottom width=23 height=22 alt='$txt{'433'}' border='0'></a>");
          document.write("<a href=javascript:hyperlink()><img src='$imagesdir/url.gif' align=bottom width=23 height=22 alt='$txt{'257'}' border='0'></a>");
          document.write("<a href=javascript:ftp()><img src='$imagesdir/ftp.gif' align=bottom width=23 height=22 alt='$txt{'434'}' border='0'></a>");
          document.write("<a href=javascript:image()><img src='$imagesdir/img.gif' align=bottom width=23 height=22 alt='$txt{'435'}' border='0'></a>");
          document.write("<a href=javascript:emai1()><img src='$imagesdir/email2.gif' align=bottom width=23 height=22 alt='$txt{'258'}' border='0'></a>");
          document.write("<a href=javascript:table()><img src='$imagesdir/table.gif' align=bottom width=23 height=22 alt='$txt{'436'}' border='0'></a>");
          document.write("<a href=javascript:trow()><img src='$imagesdir/tr.gif' align=bottom width=23 height=22 alt='$txt{'437'}' border='0'></a>");
          document.write("<a href=javascript:tcol()><img src='$imagesdir/td.gif' align=bottom width=23 height=22 alt='$txt{'449'}' border='0'></a>");
          document.write("<a href=javascript:superscript()><img src='$imagesdir/sup.gif' align=bottom width=23 height=22 alt='$txt{'447'}' border='0'></a>");
          document.write("<a href=javascript:subscript()><img src='$imagesdir/sub.gif' align=bottom width=23 height=22 alt='$txt{'448'}' border='0'></a>");
          document.write("<a href=javascript:teletype()><img src='$imagesdir/tele.gif' align=bottom width=23 height=22 alt='$txt{'440'}' border='0'></a>");
          document.write("<a href=javascript:showcode()><img src='$imagesdir/code.gif' align=bottom width=23 height=22 alt='$txt{'259'}' border='0'></a>");
          document.write("<a href=javascript:quote()><img src='$imagesdir/quote2.gif' align=bottom width=23 height=22 alt='$txt{'260'}' border='0'></a>");
          document.write("<a href=javascript:list()><img src='$imagesdir/list.gif' align=bottom width=23 height=22 alt='$txt{'261'}' border='0'></a>");
        }
        else { document.write("<font size='1'>$txt{'215'}</font>"); }
        //-->
        </script>
        <noscript>
        <font size="1">$txt{'215'}</font>
        </noscript>
        </td>
      </tr>
~;
}

$yymain .= qq~
      <tr>
        <td class="windowbg2" bgcolor="$color{'windowbg2'}" width="23%"><font size=2><b>$txt{'297'}:</b></font></td>
        <td valign=middle class="windowbg2" bgcolor="$color{'windowbg2'}">
        <script language="JavaScript1.2" type="text/javascript">
        <!--
        if((navigator.appName == "Netscape" && navigator.appVersion.charAt(0) >= 4) || (navigator.appName == "Microsoft Internet Explorer" && navigator.appVersion.charAt(0) >= 4) || (navigator.appName == "Opera" && navigator.appVersion.charAt(0) >= 4)) {
          document.write("<a href=javascript:smiley()><img src='$imagesdir/smiley.gif' align=bottom alt='$txt{'287'}' border='0'></a> ");
          document.write("<a href=javascript:wink()><img src='$imagesdir/wink.gif' align=bottom alt='$txt{'292'}' border='0'></a> ");
          document.write("<a href=javascript:cheesy()><img src='$imagesdir/cheesy.gif' align=bottom alt='$txt{'289'}' border='0'></a> ");
          document.write("<a href=javascript:grin()><img src='$imagesdir/grin.gif' align=bottom alt='$txt{'293'}' border='0'></a> ");
          document.write("<a href=javascript:angry()><img src='$imagesdir/angry.gif' align=bottom alt='$txt{'288'}' border='0'></a> ");
          document.write("<a href=javascript:sad()><img src='$imagesdir/sad.gif' align=bottom alt='$txt{'291'}' border='0'></a> ");
          document.write("<a href=javascript:shocked()><img src='$imagesdir/shocked.gif' align=bottom alt='$txt{'294'}' border='0'></a> ");
          document.write("<a href=javascript:cool()><img src='$imagesdir/cool.gif' align=bottom alt='$txt{'295'}' border='0'></a> ");
          document.write("<a href=javascript:huh()><img src='$imagesdir/huh.gif' align=bottom alt='$txt{'296'}' border='0'></a> ");
          document.write("<a href=javascript:rolleyes()><img src='$imagesdir/rolleyes.gif' align=bottom alt='$txt{'450'}' border='0'></a> ");
          document.write("<a href=javascript:tongue()><img src='$imagesdir/tongue.gif' align=bottom alt='$txt{'451'}' border='0'></a> ");
          document.write("<a href=javascript:embarassed()><img src='$imagesdir/embarassed.gif' align=bottom alt='$txt{'526'}' border='0'></a> ");
          document.write("<a href=javascript:lipsrsealed()><img src='$imagesdir/lipsrsealed.gif' align=bottom alt='$txt{'527'}' border='0'></a> ");
          document.write("<a href=javascript:undecided()><img src='$imagesdir/undecided.gif' align=bottom alt='$txt{'528'}' border='0'></a> ");
          document.write("<a href=javascript:kiss()><img src='$imagesdir/kiss.gif' align=bottom alt='$txt{'529'}' border='0'></a> ");
          document.write("<a href=javascript:cry()><img src='$imagesdir/cry.gif' align=bottom alt='$txt{'530'}' border='0'></a> ");
        }
        else { document.write("<font size='1'>$txt{'215'}</font>"); }
        //-->
        </script>
        <noscript>
        <font size="1">$txt{'215'}</font>
        </noscript>
        </td>
      </tr>

      </tr><tr>
           <td class="windowbg2" bgcolor="$color{'windowbg2'}" width="23%"><font size=2><b>$txt{'72'}:</b></font></td>
        <td valign=middle class="windowbg2" bgcolor="$color{'windowbg2'}"><font size="2">
        <textarea name="comment" rows="0" cols="60" wrap="soft" ONCLICK="javascript:storeCaret(this);" ONKEYUP="javascript:storeCaret(this);" ONCHANGE="javascript:storeCaret(this);" onMouseOver="this.focus()"></textarea>
        </font><BR></td>

    </table>
    </td>
  </tr><tr>
    <td bgcolor="$color{'bordercolor'}">

    </td>
  </tr><tr>
    <td bgcolor="$color{'bordercolor'}">
      <table class="titlebg" bgcolor="$color{'titlebg'}" align="center" width="100%">
      <tr>
        <td align="center">
    	<input type="submit" value="Add Comment" name="B1">&nbsp; <input type="reset" value="Reset" name="B2">
        </td>
      </tr>
    </table>
  <input type="hidden" name="action" value="addsubmitted">  
    </td>
  </tr>
</table>
</form>    ~;

	&template;
	exit;
}
  
############ end the add_comment sub ################## 
  
sub gadd2 {  

  
# Changing anything below this line is not recommened 
# Gets the data from the form 
$name =    $FORM{'name'};  
$email =    $FORM{'email'};  
$comment = $FORM{'comment'};  

# no html code in answers and questions
$comment =~ s/\n/<br>/g;  

# censor quiz answers and questions
&LoadCensorList; 
foreach (@censored) { 
		($tmpa,$tmpb) = @{$_}; 
	      $comment =~ s~\Q$tmpa\E~$tmpb~gi; 
	   } 


         # do YaBBC  
         $message = $comment; 
         if($enable_ubbc) { if(!$yyYaBBCloaded) { require "$sourcedir/YaBBC.pl"; } &DoUBBC; } 
         $comment = $message; 

         $message = $comment; 
         if($enable_ubbc) { &DoUBBC; } 
         $comment = $message;  
 
 if ($email ne "") { if ($email !~ /^.+\@.+\..+/) { print "The email you entered does not seem to be valied! Please try again"; exit; } # end the other if   
  # end the main if   

   }

open(DATA, ">>$vardir/guestbook.gb") || die &error("unable to open database file! Please make sure it is uploaded and CHMODed to 666.");   
flock(DATA, 2);   
print DATA "$name\:\:\:$comment\:\:\:$email\n";   
close(DATA);   
    
 
# Redirects to selected page 
 
 $yySetLocation = qq~$cgi;action=gview~; 
&redirectexit; 
&template;  
} 
##############end of sub gaddsubmitted###############  
  
# sub to show info  
sub gview {  
$yytitle = "Yabb Guestbook"; 



open(DATA, "$vardir/guestbook.gb") || die &error("unable to open database file! Please make sure it is uploaded and CHMODed to 666.");  
flock(DATA, 2);  
@data = <DATA>;  
close(DATA);  


  # now we have the data we want to split it up. We then add it to the variable $show for later printing  
foreach $line (@data) {  
  

chomp $line;  
my ($name, $comment, $email) = split (/\:\:\:/,$line);  
$yymain .= qq~ 

 if ($name ne "guest") {$yymain .= qq~
<table cellpadding="0" cellspacing="0" border="0" width="80%" bgcolor="$color{'bordercolor'}" class="bordercolor" align="center">
  <tr>
    <td>
<table border="0" width="80%">
      <tr>
 <td valign="middle" align="left" bgcolor="$color{'bordercolor'}" class="bordercolor">
        <font size=2 class="text1" color="#FFFFFF">&nbsp;<img src="$imagesdir/guest.gif" alt="">
        &nbsp;<b><a href=\"mailto:$email\" alt="$gbooktxt{'02'}"><b>$name</b></a></font></td>
</tr>
    </table></td>
  </tr>
</table>
~;
}  else {
$yymain .= qq~ 
<table cellpadding="0" cellspacing="0" border="0" width="80%" bgcolor="$color{'bordercolor'}" class="bordercolor" align="center">
  <tr>
    <td>
<table border="0" width="80%">
      <tr>
 <td valign="middle" align="left" bgcolor="$color{'bordercolor'}" class="bordercolor">
        <font size=2 class="text1" color="#FFFFFF">&nbsp;<img src="$imagesdir/profile.gif" alt="">
        &nbsp;<b><a href="$cgi;action=viewprofile;username=$name" alt="$gbooktxt{'02'}"><b>$name</b></a></b></font></td>
</tr>
    </table></td>
  </tr>
</table>
~;}

$yymain .= qq~ 
<table cellpadding="0" cellspacing="0" border="0" width="80%"  class="windowbg" bgcolor="$color{'windowbg'}" align="center">
  <tr>
    <td>
    <table width='80%' cellpadding='4' cellspacing='0'  class="windowbg" bgcolor="$color{'windowbg'}">
          <tr>
            <td  class="windowbg" bgcolor="$color{'windowbg'}" valign="top" width="80%" height="100%">

            <table width='80%' border='0'>
              <tr>
                <td align="left" valign="middle"><img src="$imagesdir/xx.gif" alt=""> <font size="2"><B>$comment</b></font> &nbsp;<BR></td></tr>
            </table>

             </td>
          </tr><tr>
        </table>
        </td>
      </tr>
    </table><p>~;}

~;}
&template;
exit;
}
      
1;