#!/usr/bin/perl $discus_conf = '/u1/tonyl/discus_admin/discus.conf'; #Discus board post script (board-post.cgi) #------------------------------------------------------------------------------- # DISCUS VERSION 3.10 COPYRIGHT NOTICE # # Discus 3.10 is copyright (c) 2000 by DiscusWare, LLC, all rights reserved. # The use of Discus is governed by the Discus License Agreement which is # available from the Discus WWW site at: # http://www.discusware.com/discus/license # # Pursuant to the Discus License Agreement, this copyright notice may not be # removed or altered in any way. #------------------------------------------------------------------------------- $double_post_threshold = 120; if (open (FILE, "$discus_conf")) { @file = ; close (FILE); foreach $line (@file) { if ($line =~ /^(\w+)=(.*)/) { $varname = $1; $value = $2; $value =~ s/\r//g; ${$varname} = $value; } } require "$admin_dir/source/src-board-subs-common"; } else { print "Content-type: text/html\n\n"; print "Script Execution Error\n"; print "\n"; print "

Script Execution Error

\n"; print "Discus scripts could not execute because the discus.conf file\n"; print "could not be opened."; print "

Reason: $!" if $!; print "

\n"; &ex('printuntil', 3, 3, $topic_number, $title, 0, 1, 0, 0, $spellchecker); $file = "$message_dir/$topic_number/$me_number.$ext" if -e "$message_dir/$topic_number/$me_number.$ext"; if (!-e "$message_dir/$topic_number/$me_number.$ext") { $file = "$secdir/$topic_number/$me_number.$ext"; $secure = 1; } open (FILE, $file); @file = ; close (FILE); if ($FORM{'isitok'} ne "okiedokie") { ($pre) = &ex('get_navbar', $topic_number, $me_number, "post"); $pre = "$title: $pre" if $GLOBAL_OPTIONS{'alternate_topic_navbar'} == 0; $pre = "$title: $pre" if ($GLOBAL_OPTIONS{'alternate_topic_navbar'} == 1 && $GLOBAL_OPTIONS{'alternate_topic_navbar_url'}); } else { &extract("$FORM{'HTTP_REFERER'}"); my (@array) = ("$topic_number:$topic_name"); foreach $key (sort by_number keys(%level_number)) { push (@array, "$level_number{$key}:$level_name{$key}"); } $pre = "Page Manager: \n"; foreach $line (@array) { ($number,$name) = split(/:/, $line, 2); $pre .= "$name: "; } } $pre .= "$L{BPCREATEDISPLAY}" if $newsubj == 1; $pre .= "$L{BPNORMALDISPLAY}" if $newsubj == 0; &ex('printuntil', 5, 9, $topic_number, $title, 0, 1); print "$pre\n"; print "

\n"; if (!($error_observed)) { print "$L{BPMESSAGEPOST}" if $newsubj == 0; print "$L{BPCREATEPOST}" if $newsubj == 1; print "

"; if ($warn_anon == 1) { print "$L{BPWARNANONYMOUS}

\n"; } if ($lint ne "") { print "$L{BPPOSSIBLEFORMATTINGERRORS}

"; print "$L{BPPOSSIBLEFORMATTINGERRORSDESC}"; print "

\n"; print "

$lint

\n"; } if ($pro && $PREF{'spellcheck'} == 1 && $dictionary ne "") { ($newmessage, $scmessage) = &ex('spellcheck', $newmessage); if ($scmessage ne "") { print $scmessage; } } &ex('printuntil', 11, 11, $topic_number, $title, 0, 1); print "\n"; print "
\n"; if ($newsubj == 1) { print "$L{BPSUBJECTTAG} $newsubject
\n"; } $postby = $FULLNAME; $postby = join("", $PROFILE_LINK, $FULLNAME, "") if $PROFILE_LINK; $postby = join("", "", $FULLNAME, "") if $EMAIL !~ m|^https?://|i; $postby = join("", "", $FULLNAME, "") if $EMAIL =~ m|^https?://|i; $pb = $L{POSTBY}; $postby = join("", "", $postby, "") if $warn_anon == 1; ($datetime) = &ex('get_date_time', "long"); $pb =~ s/\%name/$postby/g; $pb =~ s/\%date/$datetime/g; print "$pb
\n"; } print "$newmessage"; if (!$error_observed) { print "
\n"; print "

\n"; print "\n"; print "\n" if $FORM{'new_conversation'} == 1; print "\n"; print "\n" if $FORM{'isitok'} eq "okiedokie"; print "\n" if $FORM{'no_email'}; print "

\n"; print "\n"; if ($spellchecker_net_feature_on) { $button_ok = 0; $bv = 0; if ($ENV{'HTTP_USER_AGENT'} =~ m|MSIE ([\d\.]+)|) { $bv = $1; $button_ok = 1 if $bv >= 4; $button_ok = 0 if ($ENV{'HTTP_USER_AGENT'} =~ m|Mac| && $bv == 5); } elsif ($ENV{'HTTP_USER_AGENT'} =~ m|Mozilla/([\d\.]+)|) { $bv = $1; $button_ok = 1 if $bv >= 4; $button_ok = 0 if $bv == 6; $button_ok = 0 if $bv >= 4.5 && $bv < 4.6; } if ($button_ok && ($GLOBAL_OPTIONS{'spellchecker'} == 1 || $GLOBAL_OPTIONS{'spellchecker'} eq "") && $PREF{'disable_spellchecker'} != 1) { print "\n"; } } print "\n" if !$error_observed; print " "; } else { print "'$cgiurlm$adminappend'\"> "; } print "\n"; } else { print "

\n"; print "\n"; print "\n"; print "\n" if $FORM{'new_conversation'} == 1; print "\n" if $FORM{'isitok'} eq "okiedokie"; print "\n" if $FORM{'no_email'}; print "\n"; } print "

\n"; &ex('printuntil', 13, 13, $topic_number, $title, 0, 1); print "\n"; ($page, $add) = &determine_templates($topic_number, 1); @file = split(/\n/, $add); $am = $L{ADDMESSAGE}; if ($newsubj == 1) { $flag = 0; foreach $line (@file) { if ($line =~ m|$am|i && $flag == 0) { print join("", $`, "$L{BPREVISESUBJECT}", $'); $flag = 1; } } print "

$L{BPREVISESUBJECT}

\n" if $flag == 0; print "$L{BPFSUBJECT}

\n"; print "

\n"; print "

\n"; } $flag = 0; $message_hold =~ s/^\s+//; $message_hold =~ s/\s+$//; foreach $line (@file) { if ($line =~ //) { $flag = 1; } elsif ($line =~ //) { $flag = 2+$flag; } elsif ($flag >= 2) { $flag -= 2; } elsif ($line =~ //) { $submit_included = 1; } elsif ($flag == 1) { $line = &common_discus_variables($line, $topic_number, $me_number); if ($line =~ /NAME="name" VALUE=""/i) { $line = join("", $`, "NAME=\"name\" VALUE=\"$username_input\"", $'); } elsif ($line =~ /NAME="number" VALUE=""/i) { $line = join("", $`, "NAME=\"number\" VALUE=\"$FORM{'number'}\"", $'); $line = "" if $FORM{'isitok'} eq "okiedokie"; } elsif ($line =~ /NAME="Anon"/i) { $line = join("", $`, "NAME=\"Anon\" CHECKED", $') if $FORM{'Anon'} eq "on"; } elsif ($line =~ /NAME="username" VALUE=""/i) { $line = join("", $`, "NAME=\"username\" VALUE=\"$username_input\"", $'); } elsif ($line =~ /NAME="passwd" VALUE=""/i) { $line = join("", $`, "NAME=\"passwd\" VALUE=\"$FORM{'number'}\"", $'); $line = "" if $FORM{'isitok'} eq "okiedokie"; } elsif ($line =~ /NAME="email" VALUE=""/i) { $line = join("", $`, "NAME=\"email\" VALUE=\"$FORM{'email'}\"", $'); } elsif ($line =~ /$am/i) { $line = join("", $`, "$L{BPREVISEMESSAGE}", $'); } if ($line =~ m||i) { $line = join("", $`, $message_hold, $&, $'); } print $line; } } print "

\n"; if ($submit_included == 0) { print "\n"; print "\n"; print "

\n"; print "

\n"; } &ex('printuntil', 15, 17, $topic_number, $title, 0, 1); exit(0); } &error_message ("Error", "This page ($me_number) does not allow for public posting of messages!",0,1) if $param !~ /Add/ && $newsubj == 0 && $FORM{'isitok'} ne "okiedokie"; &error_message ("Error", "This page does not allow for public creation of conversations!",0,1) if $param !~ /Create/ && $newsubj == 1; &error_message ("Error", "Your username/password combination was invalid, or you are not allowed to post to this topic.",0,1) if $passwordline eq "invalid"; if ($GLOBAL_OPTIONS{'double_post'}) { if ($newsubj == 0) { ($head, $color, $lm, $ann, $ann_src, $sublist, $about, $about_src, $message, $message_src, $description_src) = &get_page($topic_number, $me_number); @msg = split(/\n/, $message); foreach $line (@msg) { if ($line =~ m||) { $time = $2; } elsif ($line =~ m|(.*)|) { $text = $1; } elsif ($line =~ m||) { next if (time - $double_post_threshold) > $time; if ($text eq $newmessage) { if ($FORM{'isitok'} ne 'okiedokie') { $url = "$message_url/$topic_number/$me_number.$ext" if !-e "$secdir/$topic_number"; $url = "$script_url/board-auth.$cgi_extension?file=/$topic_number/$me_number.$ext" if -e "$secdir/$topic_number"; } else { $url = "$cgiurlm$adminappend"; } &error_message("$L{BPALREADYPOSTED}", "$L{BPALREADYPOSTEDDESC}

$L{BPCLICKCONTINUE}

", 0, 1); } } } } else { open (TREE, "$admin_dir/msg_index/$topic_number-tree.txt"); @TREE_STRUCTURE_FILE = ; close (TREE); @ll = grep(/^(\d+)\t$topic_number\t(\d+)\t$me_number\t/, @TREE_STRUCTURE_FILE); foreach $line (@ll) { @c = split(/\t/, $line); if (&unescape($c[4]) eq $newsubject && (time - $double_post_threshold) <= $c[9]) { if ($FORM{'isitok'} ne 'okiedokie') { $url = "$message_url/$c[1]/$c[2].$ext" if !-e "$secdir/$c[1]"; $url = "$script_url/board-auth.$cgi_extension?file=/$c[1]/$c[2].$ext" if -e "$secdir/$c[1]"; } else { $url = "$cgiurlm$adminappend"; } &error_message("$L{BPALREADYPOSTED}", "$L{BPALREADYPOSTEDDESC}

$L{BPCLICKCONTINUE}

", 0, 1); } } } } $message_hold = $message_html if $message_html; if ($pro) { ($queue) = &ex('check_queue_status', $topic_number, $poster_type); } $locked_the_tree = 0; if ($newsubj == 1 && !$queue) { $create_new_subject = $newsubject; } elsif ($newsubj == 1 && $queue) { $subject_line = $newsubject; } if (!$queue) { $me_number_hold = $me_number; $topic_number_hold = $topic_number; ($postindex, $source_out, $me_number) = &ex('post_message',$topic_number,$me_number,$message_hold,$newmessage,$FULLNAME,$EMAIL,$PROFILE_LINK,$username,$group_hold,time, "", "", $create_new_subject); $topic_number = $topic_number_hold; if ($postindex == 0 || $me_number eq "") { &log_error("board-post.cgi", "posting operation", "post_message returned flawed data ($postindex;$me_number)... $@ $!"); } else { if ($pro) { ($notify_flag) = &ex('check_notification_hold', $poster_binary); if ($GLOBAL_OPTIONS{'email'} && (!$notify_flag || $FORM{'no_email'} != 1)) { &ex('email_notification_pro', $topic_number, $me_number, $FULLNAME, $newmessage, $username, $group_hold, 0, $postindex); } } else { &ex('email_notification', $topic_number, $me_number, $FULLNAME, $newmessage, $username, $group_hold, $postindex) if ($GLOBAL_OPTIONS{'email'} && !$pro); } } } else { $me_number_hold = $me_number; $topic_number_hold = $topic_number; ($queue_id, $source_out) = &ex('send_message_to_queue', $topic_number, $me_number, $message_hold, $newmessage, $FULLNAME, $username, $group_hold, $subject_line, $EMAIL, $PROFILE_LINK); $me_number = $me_number_hold; $topic_number = $topic_number_hold; &ex('email_notification_pro', $topic_number, $me_number, $FULLNAME, $newmessage, $username, $group_hold, 1, $queue_id) if ($GLOBAL_OPTIONS{'email'} && $pro); } if ($source_out =~ m|\\image_notuploaded\{| || $source_out =~ m|\\attachment_notuploaded\{|) { $string = $source_out; &header; ($bgcolor, $text, $link, $vlink, $alink, $face, $size, $image) = &ex('extract_colorsonly', 1); &ex('printuntil', 1, 1, $topic_number, "$L{BPIMGUPLOADTITLE3_00}"); print "

$L{BPIMGUPLOADTITLE3_00}\n

\n"; for ($i = 3; $i <= 9; $i += 2) { &ex('printuntil', $i, $i, $topic_number, "$L{BPIMGUPLOADTITLE3_00}"); } print "$L{BPIMGUPLOADINSTR3_00}

\n"; print "

\n"; if ($FORM{'isitok'} ne "okiedokie") { print "$L{BPIMGUPLOADCANCEL13_00} \n"; } else { print "$L{BPIMGUPLOADCANCEL13_00} \n"; } print "$L{BPIMGUPLOADCANCEL2}. "; print "$L{BPIMGUPLOADCANCEL33_00}\n"; print "
\n"; for ($i = 15; $i <= 17; $i += 2) { &ex('printuntil', $i, $i, $topic_number); } exit(0); } else { &ex('queue_submitted', $topic_number, $me_number, $adminappend, $FORM{'isitok'}) if $queue; $secure = 0; $secure = 1 if !-e "$message_dir/$topic_number"; $secure = 0 if !$pro; $ts = time; $url = "$message_url/$topic_number/$me_number.$ext" if !$secure; $url .= "?$ts" if (!$noqm && !$secure); $url = "$script_url/board-auth.$cgi_extension?file=/$topic_number/$me_number.$ext&lm=$ts" if $secure; &seturl("$url") if $FORM{'isitok'} ne "okiedokie"; &seturl("$cgiurlm$adminappend") if $FORM{'isitok'} eq "okiedokie"; } sub verify_owner { my ($owner, $username) = @_; my (@group_data, $group, $usernames, @username, $groupname); open (GROUP, "$admin_dir/groups.txt") || &error_message("File Error", "Cannot open group file (groups.txt)!"); @group_data = ; close (GROUP); foreach $group (@group_data) { chop ($group) if $group =~ /\n$/; ($groupname, $usernames) = split(/:/, $group); if ($groupname eq $owner) { @username = split(/,/, $usernames); if (grep (/^$username$/, @username)) { return 1; } else { return 0; } } } return 0; } # END - FILE IS CORRECTLY UPLOADED #

Script Execution Error

$L{BPAUTHERROR}

$L{BPAUTHERROR}

$L{BPAUTHERROR}

$L{BPAUTHERROR}

$L{BPADDMSGERROR}

$L{BPCREATEERROR}

$L{BPADDMSGERROR}

$L{BPADDMSGERROR}

$L{PROFANITY_DETECTED}

$L{BPREVISESUBJECT}