#!/usr/local/bin/perl

##################################################################
#       Advertisement Banner Rotator V2.0
#
# This program is distributed as freeware. We are not            	
# responsible for any damages that the program causes	
# to your system. It may be used and modified free of 
# charge, as long as the copyright notice
# in the program that give me credit remain intact.
# If you find any bugs in this program. It would be thankful
# if you can report it to us at cgifactory@cgi-factory.com.  
# However, that email address above is only for bugs reporting. 
# We will not  respond to the messages that are sent to that 
# address. If you have any trouble installing this program, 
# olease feel free to post a message on our CGI Support Forum.
# Selling this script is absolutely forbidden and illegal.
##################################################################
#
#               COPYRIGHT NOTICE:
#
#         Copyright 1999-2000 CGI-Factory.com TM 
#	  A subsidiary of SiliconSoup.com LLC
#
#
#      Web site: http://www.cgi-factory.com
#      E-Mail: cgifactory@cgi-factory.com
#
#   Advertisement Banner Rotator V2.0 is protected by the copyright 
#   laws and international copyright treaties, as well as other 
#   intellectual property laws and treaties.
###################################################################
#Nothing more needs to be modified below this line, unless you feel
#like doing it.

require "cfg.cgi";

read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});
@pairs = split(/&/, $buffer);
foreach $pair (@pairs) {
        ($name, $value) = split(/=/, $pair);
        $value =~ tr/+/ /;
        $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
        $value =~ s/\n/ /g;

        $request{$name} = $value;


}
print "Content-type: text/html\n\n";


############## tell the script what the action is

if ($request{'action'} eq "viewdata") {

&view_data;

exit;

}

if ($request{'action'} eq "view_all") {

&view_all;

exit;

}

	
if ($request{'action'} eq "addnew") {

&addnew;

exit;

}

if ($request{'action'} eq "preview") {

&preview;

exit;

}


if ($request{'action'} eq "pmodify") {

&preview_modify;

exit;

}

if ($request{'action'} eq "modify") {

&modify;

exit;

}

if ($request{'action'} eq "getid") {

&getid;

exit;

}

if ($request{'action'} eq "pdelete") {

&pdelete;

exit;

}

if ($request{'action'} eq "creset") {

&creset;

exit;

}

if ($request{'action'} eq "erase") {

&erase;

exit;

}

if ($request{'action'} eq "comdelete") {

&comdelete;

exit;

}

if ($request{'action'} eq "deletenow") {

&deletenow;

exit;

}

&exitnow;


########################################################## view an entry

sub view_data {	

&vpassword;

$id= $request{'id'};

if ($id=~ tr/;<>*|`&$!#()[]{}:'"//) {
        	

            print "Security Alert! Action canceled.<br>\n";
        	
        	print "Please don't use weird symbols\n";
        	
        	exit;
        	
        }


open (tid, "<$datalocation/tcount.txt") or &error("Unable to open the count file");

if ($flock eq "y") {

flock tid, 2; 

}

$tid=<tid>;

close(tid);

$id= $request{'id'};

if ($id > $tid or !$id) {
	
	print "member not in database";
	
exit;

} 


open (data, "<$datalocation/$id.txt") or &exitnow;
	
if ($flock eq "y") {

flock data, 2; 

}

@data=<data>;
	
close(data);
	
$percent= @data[10];

$chance= int($percent * 100);

$currenttime=time();
$expire=@data[7];
$newtime=$expire-$currenttime;
    
if ($newtime < 0) {
    	
	$extime="expired!";    	
}
    
else {
    	
    	$extime= $newtime/86400;
    	
}


    print "<b>ID:</b>$id<br>";
	print "<b>Name:</b>&nbsp;@data[0]<br>";
	print "<b>Url:</b>&nbsp;@data[1]<br>";
	print "<b>Src:</b>&nbsp;@data[2]<br>";
	print "<b>Name:</b>&nbsp;@data[3]<br>";
    print "<b>Height:</b>&nbsp;@data[4]<br>";
	print "<b>Width:</b>&nbsp;@data[5]<br>";
	print "<b>Alt Text:</b>&nbsp;@data[6]<br>";
	print "<b>Expire after</b>&nbsp;\"$extime\" days<br>";
    print "<b>Total times displayed:</b>&nbsp;@data[8]<br>";
    print "<b>Total times clicked:</b>&nbsp;@data[9]<br>";
    print "<b>Chance been clicked:</b>&nbsp;$chance%<br>";

exit;

}



########################################################## view all entries


sub view_all {

&vpassword;

open (tid, "<$datalocation/tcount.txt") or &error("Unable to open the count file");

if ($flock eq "y") {

flock tid, 2; 

}

$tid=<tid>;

close(tid);

$tid++;

$found=0;
$i=1;

if ($i=~ tr/;<>*|`&$!#()[]{}:'"//) {
        	
            print "Security Alert! Action canceled.<br>\n";
	        print "Please don't use weird symbols\n";
        	
        	exit;
        	
        }


READ: for ($i; $i<$tid; $i++) {
	
	open ($i, "<$datalocation/$i.txt") or next READ;
	
	@$idata=<$i>;
	
    close($i);
	
	$found++;
	
	print "<form action=\"$admincgi\" method=\"post\">Name: @$idata[0] ID:$i<br>\n";
    print "&nbsp;<input type=\"hidden\" name=\"id\" value=\"$i\">Password: <input type=\"password\" name=\"password\">";
    print "<input type=\"hidden\" name=\"action\" value=\"viewdata\">";
    print "<input type=\"submit\" value=\"view!!\">";
    print "</form><br>\n";
	
	
}
	
print "Total result(s) found: $found";


exit;

}

########################################################## preview new entries

sub preview {
	
&vpassword;

print "The following information will be added:<br>";

print "Name: $request{'name'}<br>";
print "Url: $request{'url'}<br>";
print "Src: $request{'src'}<br>";
print "Text: $request{'text'}<br>";
print "Width: $request{'w'}<br>";
print "Height: $request{'h'}<br>";
print "Alt text: $request{'alttext'}<br>";
print "Expire after \"$request{'expire'}\" days<br>";


print "<form action=\"$admincgi\" method=\"post\">\n";
print "Password: <input type=\"password\" name=\"password\">\n";
print "<input type=\"hidden\" name=\"name\" value=\"$request{'name'}\">\n";
print "<input type=\"hidden\" name=\"url\" value=\"$request{'url'}\">\n";
print "<input type=\"hidden\" name=\"src\" value=\"$request{'src'}\">\n";
print "<input type=\"hidden\" name=\"text\" value=\"$request{'text'}\">\n";
print "<input type=\"hidden\" name=\"w\" value=\"$request{'w'}\">\n";
print "<input type=\"hidden\" name=\"h\" value=\"$request{'h'}\">\n";
print "<input type=\"hidden\" name=\"alttext\" value=\"$request{'alttext'}\">\n";
print "<input type=\"hidden\" name=\"expire\" value=\"$request{'expire'}\">\n";
print "<input type=\"hidden\" name=\"exposures\" value=\"0\">\n";
print "<input type=\"hidden\" name=\"hit\" value=\"0\">\n";
print "<input type=\"hidden\" name=\"percent\" value=\"0\">\n";
print "<input type=\"hidden\" name=\"action\" value=\"addnew\">\n";
print "<input type=\"submit\" value=\"Add!\"></form>";

exit;

}

########################################################### preview before modify an entry

sub preview_modify {

&vpassword;

print "The following information will be changed:<br>";
print "Name: $request{'name'}<br>";
print "Url: $request{'url'}<br>";
print "Src: $request{'src'}<br>";
print "Text: $request{'text'}<br>";
print "Width: $request{'w'}<br>";
print "Height: $request{'h'}<br>";
print "Alt text: $request{'alttext'}<br>";
print "Expire after \"$request{'expire'}\" days<br>";

print "<form action=\"$admincgi\" method=\"post\">\n";
print "Password: <input type=\"password\" name=\"password\">\n";
print "<input type=\"hidden\" name=\"name\" value=\"$request{'name'}\">\n";
print "<input type=\"hidden\" name=\"url\" value=\"$request{'url'}\">\n";
print "<input type=\"hidden\" name=\"src\" value=\"$request{'src'}\">\n";
print "<input type=\"hidden\" name=\"text\" value=\"$request{'text'}\">\n";
print "<input type=\"hidden\" name=\"w\" value=\"$request{'w'}\">\n";
print "<input type=\"hidden\" name=\"h\" value=\"$request{'h'}\">\n";
print "<input type=\"hidden\" name=\"alttext\" value=\"$request{'alttext'}\">\n";
print "<input type=\"hidden\" name=\"expire\" value=\"$request{'expire'}\">\n";
print "<input type=\"hidden\" name=\"exposures\" value=\"$request{'exposures'}\">\n";
print "<input type=\"hidden\" name=\"hits\" value=\"$request{'hits'}\">\n";
print "<input type=\"hidden\" name=\"percent\" value=\"$request{'percent'}\">\n";
print "<input type=\"hidden\" name=\"id\" value=\"$request{'id'}\">\n";
print "<input type=\"hidden\" name=\"action\" value=\"modify\">\n";
print "<input type=\"submit\" value=\"Modify!\"></form>";


exit;

}

########################################################### modify

sub modify {

&vpassword;	

$id=$request{'id'};

if ($id=~ tr/;<>*|`&$!#()[]{}:'"//) {
        	
        
        	print "Security Alert! Action canceled.<br>\n";
        	
        	print "Please don't use weird symbols\n";
        	
        	exit;
        	
        }


$currenttime=time();
$expireday= $request{'expire'};
$expiretime= $expireday*86400;
$newtime= $expiretime+$currenttime;

open (data, ">$datalocation/$id.txt") or &error("Unable to open the data file for writing");

if ($flock eq "y") {

flock data, 2; 

}

print data "$request{'name'}\n";
print data "$request{'url'}\n";
print data "$request{'src'}\n";
print data "$request{'text'}\n";
print data "$request{'w'}\n";
print data "$request{'h'}\n";
print data "$request{'alttext'}\n";
print data "$newtime\n";
print data "$request{'exposures'}\n";
print data "$request{'hits'}\n";
print data "$request{'percent'}\n";

close(data);

print "The following information had been changed:<br>\n";

print "Name: $request{'name'}<br>";
print "Url: $request{'url'}<br>";
print "Src: $request{'src'}<br>";
print "Text: $request{'text'}<br>";
print "Width: $request{'w'}<br>";
print "Height: $request{'h'}<br>";
print "Alt text: $request{'alttext'}<br>";
print "Expire after $request{'expire'} days<br>";

exit;


}


########################################################### comfirm reseting data
sub creset {

&vpassword;	

print "Are you sure you want to do this? The tracking record for banner NO.$request{'id'} will be reset to 0<br>\n";
print "<form action=\"$admincgi\" method=\"post\">\n";
print "Password: <input type=\"password\" name=\"password\">\n";
print "<input type=\"hidden\" name=\"id\" value=\"$request{'id'}\">\n";
print "<input type=\"hidden\" name=\"action\" value=\"erase\">";
print "<input type=\"submit\" value=\"Yes!\"></form>\n"; 


exit;

}
	
	
########################################################### reset data
sub erase {

&vpassword;	

$id=$request{'id'};

if ($id=~ tr/;<>*|`&$!#()[]{}:'"//) {
        	

            print "Security Alert! Action canceled.<br>\n";
        	
        	print "Please don't use weird symbols\n";
        	
        	exit;
        	
        }



open (bdata, "<$datalocation/$id.txt") or &error("Unable to open the banner data for reading");

if ($flock eq "y") {

flock bdata, 2; 

}

@bdata=<bdata>;

close(bdata);

@reset=("0\n","0\n","0\n");

splice(@bdata, 8,3, @reset);

open (bdata2, ">$datalocation/$id.txt") or &error("Unable to open the banner data for reading");

if ($flock eq "y") {

flock bdata2, 2; 

}

print bdata2 @bdata;

close(bdata2);

print "Done\n";


exit;

}



########################################################### add new entries
sub addnew {

&vpassword;

open (id, "<$datalocation/tcount.txt") or &error("Unable to open the count file");

if ($flock eq "y") {

flock id, 2; 

}

$id=<id>;

close(id);

$id++;

open (wid, ">$datalocation/tcount.txt") or &error("Unable to write to the count file");

if ($flock eq "y") {

flock wid, 2; 

}
print wid"$id";

close(wid);


$currenttime=time();
$expireday= $request{'expire'};
$expiretime= $expireday*86400;
$newtime= $expiretime+$currenttime;

open (data, ">$datalocation/$id.txt") or &error("Unable to open the data file for writing");

if ($flock eq "y") {

flock data, 2; 

}

print data "$request{'name'}\n";
print data "$request{'url'}\n";
print data "$request{'src'}\n";
print data "$request{'text'}\n";
print data "$request{'w'}\n";
print data "$request{'h'}\n";
print data "$request{'alttext'}\n";
print data "$newtime\n";
print data "0\n";
print data "0\n";
print data "0\n";

close(data);

print "The following information had been added:<br>\n";

print "Name: $request{'name'}<br>";
print "Url: $request{'url'}<br>";
print "Src: $request{'src'}<br>";
print "Text: $request{'text'}<br>";
print "Width: $request{'w'}<br>";
print "Height: $request{'h'}<br>";
print "Alt text: $request{'alttext'}<br>";
print "Expire after \"$request{'expire'}\" days<br>";

exit;

}


################################################# get entry of an ID

sub getid {

&vpassword;

$id= $request{'id'};

if ($id=~ tr/;<>*|`&$!#()[]{}:'"//) {
        	
        	print "Security Alert! Action canceled.<br>\n";
        	
        	print "Please don't use weird symbols\n";
        	
        	exit;
        	
        }


open (tid, "<$datalocation/tcount.txt") or &error("Unable to open the count file");

if ($flock eq "y") {

flock tid, 2; 

}

$tid=<tid>;

close(tid);

$id= $request{'id'};

if ($id > $tid or !$id) {
	
	print "member not in database";
	
exit;

} 

open (data, "<$datalocation/$id.txt") or &exitnow;
	
if ($flock eq "y") {

flock data, 2; 

}

@data=<data>;
	
close(data);
	
$currenttime=time();
$expire=@data[7];
$newtime=$expire-$currenttime;
    
if ($newtime < 0) {
    	
	$extime="expired!";    	
}
    
else {
    	
    	$extime= $newtime/86400;
    	
}
    
	print "<form action=\"$admincgi\" method=\"post\">\n";
	print "Name<input type=\"text\" name=\"name\" value=\"@data[0]\"><br>\n";
	print "URL<input type=\"text\" name=\"url\" value=\"@data[1]\"><br>\n";
	print "Src<input type=\"text\" name=\"src\" value=\"@data[2]\"><br>\n";
	print "Text<input type=\"text\" name=\"text\" value=\"@data[3]\"><br>\n";
	print "Width<input type=\"text\" name=\"w\" value=\"@data[4]\"><br>\n";
	print "Height<input type=\"text\" name=\"h\" value=\"@data[5]\"><br>\n";	
	print "Alt Text<input type=\"text\" name=\"alttext\" value=\"@data[6]\"><br>\n";
	print "Expire after (days)<input type=\"text\" name=\"expire\" value=\"$extime\"><br>\n";
    print "Password: <input type=\"password\" name=\"password\">";
    print "<input type=\"hidden\" name=\"exposures\" value=\"@data[8]\">\n";
    print "<input type=\"hidden\" name=\"hits\" value=\"@data[9]\">\n";
    print "<input type=\"hidden\" name=\"percent\" value=\"@data[10]\">\n";
    print "<input type=\"hidden\" name=\"id\" value=\"$id\">\n";
    print "<input type=\"hidden\" name=\"action\" value=\"pmodify\">\n";	
	print "<input type=\"submit\" value=\"Modify!\">\n";
	print "</form>\n";
	
exit;

}

################################################# delete a member
sub pdelete {

&vpassword;

$id= $request{'id'};

if ($id=~ tr/;<>*|`&$!#()[]{}:'"//) {
        	
            print "Security Alert! Action canceled.<br>\n";
        	
        	print "Please don't use weird symbols\n";
        	
        	exit;
        	
        }



open (tid, "<$datalocation/tcount.txt") or &error("Unable to open the count file");

if ($flock eq "y") {

flock tid, 2; 

}

$tid=<tid>;

close(tid);

$id= $request{'id'};

if ($id > $tid or !$id) {
	
print "member not in database";
	
exit;

} 

open (data, "<$datalocation/$id.txt") or &exitnow;
	
if ($flock eq "y") {

flock data, 2; 

}

@data=<data>;
	
close(data);
	
$currenttime=time();
$expire=@data[7];
$newtime=$expire-$currenttime;
    
if ($newtime < 0) {
    	
	$extime="expired!";    	
}
    
else {
    	
    	$extime= $newtime/86400;
    	
}
    
	print "<form action=\"$admincgi\" method=\"post\">\n";
	print "Name: @data[0]<br>\n";
	print "URL: @data[1]<br>\n";
	print "Src: @data[2]<br>\n";
	print "Text: @data[3]<br>\n";
	print "Width: @data[4]<br>\n";
	print "Height: @data[5]<br>\n";	
	print "Alt Text: @data[6]<br>\n";
	print "Expire after (days) $extime days<br>\n";
    print "Displayed times: @data[8]<br>\n";
    print "Hits: @data[9]<br>\n";
    print "Click through radio: @data[10]<br>\n";
    print "Id: $id<br>\n";
    print "Password: <input type=\"password\" name=\"password\">\n";
    print "<input type=\"hidden\" name=\"id\" value=\"$id\">\n";
    print "<input type=\"hidden\" name=\"action\" value=\"comdelete\">\n";	
	print "<input type=\"submit\" value=\"delete!!\">\n";
	print "</form>\n";


	
exit;

}



############################################ comfirm delete

sub comdelete {

&vpassword;
	
	print "<form action=\"$admincgi\" method=\"post\">\n";
	print "Are you sure you want to do this?";
    print "Password: <input type=\"password\" name=\"password\">\n";
    print "<input type=\"hidden\" name=\"id\" value=\"$request{'id'}\">\n";
    print "<input type=\"hidden\" name=\"action\" value=\"deletenow\">\n";	
	print "<input type=\"submit\" value=\"yes!!\">\n";
	print "</form>\n";

exit;

}

############################################ deletenow

sub deletenow {
	
&vpassword;
	
if ($request{'id'}=~ tr/;<>*|`&$!#()[]{}:'"//) {
        	
            print "Security Alert! Action canceled.<br>\n";
        	
        	print "Please don't use weird symbols\n";
        	
        	exit;
        	
        }




	unlink("$datalocation/$request{'id'}.txt");
	
	print "Entry NO. $request{'id'} has been deleted!\n";

exit;

}


############################################ no action



sub exitnow {
	
	print "member not in database";
	
exit;
	
}

sub error{

$errors = $_[0] ;

print "An error has occured, the error is $errors<br>\n";
print "<font color=\"red\">$!</font>\n";

exit;

}
	
###### password

sub vpassword{
	

open (PASS,"$datalocation/pass.dat") || &error("Unable to open the password file"); 

if ($flock eq "y") {

flock PASS, 2; 

}


$pass = <PASS>;

close(PASS);

$request{'password'}=~ tr/A-Z/a-z/;

$pass2 = crypt($request{'password'}, "MM");

unless ($pass eq "$pass2") {
	
$timenow=localtime();
	
	print "Incorrect logon. Use your back button to try again.<br>";
		print "The password you entered is incorrect.<br>";
        print "The following information has been sent to the webmaster of the web site<br>";
        print "Your Information: <ul>$ENV{'REMOTE_HOST'}</ul>";
        print "<ul>Password: $request{'password'}</ul>";
        print "<ul>Time: $timenow</ul>";
        print "<!-- WiredMinds eMetrics tracking with Enterprise Edition V5.4 START -->
<script type='text/javascript' src='https://count.carrierzone.com/app/count_server/count.js'></script>
<script type='text/javascript'><!--
wm_custnum='27ac4df640cb160c';
wm_page_name='ad-admin.txt';
wm_group_name='/services/webpages/w/i/wildboar.net/public/blog/computers/webdesign/cgi/perl/bannerrotators/advbanner/files';
wm_campaign_key='campaign_id';
wm_track_alt='';
wiredminds.count();
// -->
</script>
<!-- WiredMinds eMetrics tracking with Enterprise Edition V5.4 END -->
</body></html>";
 
 if ($alert eq "y") {       
        
        
        
  if ($yourmail=~ tr/;<>*|`&$!#()[]{}:'"// or $mailprog=~ tr/;<>*|`&$!#()[]{}:'"//) {
        	
           
            print "Security Alert! Action canceled.<br>\n";
	        print "Please don't use weird symbols\n";
        	
        	exit;
        	
        }
      
		open (MAIL, "|$mailprog -t") or &error("Unable to open the mail program");
        print MAIL "To: $yourmail\n";
        print MAIL "From: $yourmail\n";
        print MAIL "Subject: bad password\n";
        print MAIL "Just a quick note to let you know that someone\n";
        print MAIL "entered the wrong password for entering the admin script.\n";
        print MAIL "Here are the information:\n\n";
        print MAIL "$ENV{'REMOTE_ADDR'}\n";
        print MAIL "Password: $request{'password'}\n";
        print MAIL "$timenow\n";
        
        close(MAIL);
        
        exit;
        	
        }      
   
exit;
	
}

}