#!/usr/bin/perl -w
use CGI qw(:standard -debug);
use CGI::Pretty ":standard";
use CGI::Carp qw(fatalsToBrowser);

########### Credits #################
# Script written by R. Todd Vandenbark
#####################################

#----------- define variables ----------
my $inuser;         # username entered
my $inpass;         # password entered
my $cookie_user;    # username cookie
my $cookie_pwd;     # username passwd
my $bsuname;        # bsu id
my $username;       # staff sys user id
my $passwd;         # staff sys password
my $found=0;        # when found
my @filestuff;      # holds input file
my @formstuff;      # holds form input

# -------- read in password file --------
my $inputFile = "../staff.txt";
open (IN, $inputFile) ||  die "Can't open $inputFile: $!\n";
@filestuff = <IN>;
chomp(@filestuff);
close IN;


$inuser=cookie('studylog_username');
$inpass=cookie('studylog_passwd');

if (!$inuser || !$inpass) {
	# ---- get username & password entered ----
	$inuser = param("username"); chomp $inuser;
	$inpass = param("passwd2"); chomp $inpass; 
}


# ---- search for match ------------------
foreach $key (@filestuff) {
	($bsuname,$username,$passwd) = split (/:/, $key);
	if ( ($inuser eq $username) && ($inpass eq $passwd) ) {
		$found++; 
        } # end if
} # ---- end foreach ____

if (!$found) { # if no match, present error message
    $title = "Invalid entry";
    $content = '<p>Please <a href="../staffStart.html">
        go back and try again</a></p>';

} # ------- end if ------   

else { # ------ match ----------

	$cookie_user = cookie(-name    => 'studylog_username',
	                      -expires => "+1h",
						  -value   => $inuser );
	$cookie_pwd =  cookie(-name    => 'studylog_passwd',
	                      -expires => "+1h",
						  -value   => $inpass );
	
	$logo = '<img src="../images/faviconbw.png" alt="logo" width="64" height="64" class="logo" />';
	$title = "Staff System";
    $content = '<h2>Main Menu</h2>
	  <table summary="Staff system main menu.">
      <tr> <td>
      <a href="../manualStudentLogin.html">Manual student login
      </a></td>
      <td><a href="../newOrg.html">New organization contact</a></td>
      </tr><tr>
      <td><a href="../reports.html">Reports</a></td>
      <td><a href="listorg.cgi">Update contact info</a></td>
      </tr>
      <tr><td><a href="admin.cgi">Manage staff accounts
      </a></td>
	<td><a href="listorg2delete.cgi">Delete organization contact</a></td></tr>
	  </table>';
	  
	  
	  

} # --------end else -----

&pgprint;

# ------ print page -------

sub pgprint {
    my $css = '<link rel="stylesheet" ' .
    'type="text/css" href="../studylog3.css" />';
    print header(-cookie => [$cookie_user, $cookie_pwd]);
    print start_html (-title => $title,
                      -head => $css,
                      -class => 'oneColFixCtrHdr');
    print '<div id="container"><div id="header">';
    print h1("$logo $title");
    print '</div> <!-- end #header -->' . "\n";
    print '<div id="mainContent">' . "\n";
	
    print "$content \n";

print <<EOF;

      <table>
      <tr>
        <td class="w33l">
           <form action="bugReport.cgi" method="post" name="bugReport" id="bugReport">
		   <input name="pageFrom" type="hidden" value="StaffSystemMainMenu" />
           <a href="javascript:document.bugReport.submit()">
		   <!--  onclick="return val_form_this_page()" -->
			<img src="../images/problemButton1.gif" alt="Report a problem." /></a>
			</form>
          </td>
        <td class="w33ctr"><form action="logoutStaff.cgi" method="post"><input type="submit" value="LOG OUT"></td>
		<td class="w33rt"><a href="../helpfaq.html"><img src="../images/helpButton1.gif" alt="Help function" /></a></td>
      </tr>
    </table>
    
EOF

    print '<!-- end #mainContent --></div>'.
    '<div id="footer">'.
    '<p>Created by Michael Pierce, Todd Vandenbark, Crystal White'.
    '<br />S517: Web Programming <br />'.
     'March 28th, 2009 <br />'.
    '<a href="http://studylog.firesidelibrarian.com/contact.htm">'.
    'Contact Us</a></p>'.
    '<!-- end #footer --></div>'.
    '<!-- end #container --></div>';

    print end_html();
} # ------ end sub --------