#!/usr/bin/perl -w
use CGI qw(:standard -debug);
use CGI::Carp qw(fatalsToBrowser);

########### Credits #################
# Script written by R. Todd Vandenbark
#####################################

# ----------- define variables ----------
my $form;         # input form
my $bsuname;      # BSU id name
my $username;     # staff system username
my $passwd;       # staff system password

# --------- initialize error flags ----
$badbsu=0; $badname=0;
$badpass=0; $error=0;

# ---- files --------------
$stafffile = '../../staff.txt';
$tempfile= '../tempfile.txt';

# --- get and clean input ----
$form = "findstaff.cgi";
$bsuname = param("bsuname"); chomp $bsuname;
$bsuname = &cleaninput($bsuname);
$username = param("username"); chomp $username;
$username = &cleaninput($username);
$passwd = param("passwd"); chomp $passwd;
$passwd = &cleaninput($passwd);

# ---- check input for valid characters ----
$badbsu = &checkinput($bsuname);
$baddname = &checkinput($username);
$baddpass = &checkinput($passwd);

# ----- process & output results ----
if (!$error) { # replace file data
    &update1($bsuname,$username,$passwd);
    $title = "Update complete.";
    $content = '<p><a href="findstaff.cgi">Update another</a> 
	   OR back to <a href="sl2.cgi">Main Menu</a></p>';
}
else { # return to form
    foreach (@errstr) {
    $errors .= $_; } # -- end foreach --
    $title = "Invalid entry";
    $content = '<p>Please '.
       '<a href="javascript: history.go(-1)">'.
       ' go back  and try again</a></p>'.
    "<p>Invalid $errors</p>";
}

&pgprint();

# ------------ subroutines used -----------
sub cleaninput {
    my $string = $_[0];
    $string =~ s/<([^>]|\n)*>//g ; # strip HTML
    $string =~ s/^\s+// ; # strip leading spaces
    $string =~ s/\s+$// ; # strip trailing spaces
    return $string;
}

sub checkinput {
    my $input = $_[0];
    my $result=0; # returns bad/good name result
    if ($input !~ /^[\w]+$/i)
        { $result=1; $error++;
        push (@errstr, " name: $input");
		}
    return $result;
}

sub update1 {
    open (OUT, ">>$tempfile") ||
       die "Can't open temporary file $tempfile: $!\n";
 	$tmpout = join( ":", $bsuname,$username,$passwd);
	print (OUT "$tmpout\n") ||
    	die "Error writing $tempfile: $!\n";
    
    close OUT;    # close file
       
    unlink $stafffile ||
       die "Can't delete old $stafffile: $!\n";
 
    rename $tempfile, $stafffile ||
      die "Can't rename $tempfile to $stafffile: $!\n";

} # ---- end update1 sub -----------

sub pgprint {
    $logo = '<img src="../images/faviconbw.png" alt="logo" width="64" height="64" class="logo" />';
	my $css = '<link rel="stylesheet" ' .
    'type="text/css" href="../studylog3.css" />';
    print header();
    print start_html (-title => $title,
                      -head => $css,
                      -class => 'oneColFixCtrHdr');
    print "\n";
	print '<div id="container"><div id="header">' . "\n";
    print h1("$logo $title");
	print "\n";
    print '</div> <!-- end #header -->' . "\n";
    print '<div id="mainContent">' . "\n";  
    print "$content";
	print "\n";
	
print <<EOF;

      <table>
      <tr>
        <td class="w33l">
           <form action="bugReport.cgi" method="post" name="bugReport" id="bugReport">
		   <input name="pageFrom" type="hidden" value="updatestaff.cgi" />
           <a href="javascript:document.bugReport.submit()">
			<img src="../images/problemButton1.gif" alt="Report a problem." /></a>
			</form>
          </td>
        <td class="w33ctr"><a href="sl2.cgi"><img src="../images/mainmenudiamond.gif" alt="Main menu." width="100" height="75" /></a></td>
		<td class="w33rt"><a href="../helpfaq.html"><img src="../images/helpButton1.gif" alt="Help function" /></a></td>
      </tr>
    </table>
    
EOF
	
    print '<!-- end #mainContent --></div> . "\n"'.
    '<div id="footer">' . "\n" .
    '<p>Created by Michael Pierce, Todd Vandenbark, Crystal White' . "\n" .
    '<br />S517: Web Programming <br />' . "\n" .
     'March 28th, 2009 <br />' . "\n" .
    '<a href="http://studylog.firesidelibrarian.com/contact.htm">'.
    'Contact Us</a></p>' . "\n" .
    '<!-- end #footer --></div>' . "\n" .
    '<!-- end #container --></div>' . "\n";
    
    print end_html();
}