#!/usr/local/bin/perl

#YOU HAD BETTER PASSWORD PROTECT THE DIRECTORY WHERE YOU USE THIS.

@admins = (
	"CHANGEME1",
	"CHANGEME2",
	"CHANGEME3"
);

$adminName = "YOUR NAME";
$adminEmail = "YOUREMAIL@ADDRESS";

$dir = "/home/CHANGEME/public_html";

use CGI;

$query = new CGI;

print <<EOM
Content-type: text/html

<title>Edit Pages</title>
<h1>Edit Pages</h1>
EOM
;

if ($query->param('edit') ne "") {
	&editPage($query->param('file'));
} elsif ($query->param('new') ne "") {
	&editPage($query->param('newfile'), 1);
} elsif ($query->param('editsubmit') ne "") {
	&editSubmitPage($query->param('file'));
} else {
	&index(0);
}

sub index
{
	my($nesting) = @_;
	my($p, $admin);
	# The index is not displayed for people who
	# are not admins.
	for $p (@admins) {
		if ($ENV{'REMOTE_USER'} eq $p) {
			$admin = 1;
			last;
		}
	}
	if (!$admin) {
		# Non-admins go straight to the edit page for themselves,
		# unless we are nesting already (don't enter endless
		# loops after displaying error messages!)
		if ($nesting) {
			return;
		}
		&editPage($ENV{'REMOTE_USER'} . ".html", 0);
		return;
	}
	opendir(DIR, $dir);
	my(@list);
	print $query->start_form();
	print "<strong>Select the page you want to edit. Then click on\n";
	print "Edit This Page.</strong> Or, if you want to create a new\n";
	print "page, enter a name for the page and click on Create New Page.\n";
	print "Complete editing instructions will\n";
	print "appear on the next page.<p>\n";
	print "<table border=1 align=\"center\">\n";
	print "<tr><td>\n";
	while ($name = readdir(DIR)) {
		if ($name !~ /.html$/) {
			next;
		}
		if ($name eq "template.html") {
			next;
		}
		push @list, $name;
	}
	closedir(DIR);
	@list = sort @list;
	print $query->scrolling_list("file", \@list, undef, 10);
	print "<td>\n";
	print $query->submit(-name=>"edit", -value=>"Edit This Page");
	print "<tr>\n";
	print "<td>\n";
	print "Filename for New Page:<br>\n";
	print "(The filename should end with <strong>.html</strong>.)<br>\n";
	print $query->textfield(-name=>"newfile", -value=>"");
	print "<td>\n";
	print $query->submit(-name=>"new", -value=>"Create New Page");
	print "</table>\n";
	print $query->end_form();
}

sub editPage
{
	my($file, $create) = @_;
	my($line);
	my($text);
	if ($create) {
		if ($file eq "") {
			print "<h3>Enter a File Name First!</h3>\n";
			&index(1);
			return;
		}
		if ($file !~ /^[\w\.]+\.html$/) {
			print "<h3>Sorry, that filename cannot be used.</h3>\n";
			print "The filename was: $file<p>\n";
			print "Filenames must end in .html, and they must\n";
			print "not contain spaces. Letters, numbers, _ and .\n";
			print "are permitted. Example: <code>bob.html</code>\n";
			print "<p>\n";
			&index(1);
			return;
		}
		if (open(IN, "$dir/$file")) {
			print "<h3>Sorry, that file already exists.</h3>\n";
			print "The filename was: $file<p>\n";
			print "<strong>Instead, select the file from the list of\n";
			print "files, and click on Edit This Page.</strong>\n";
			&index(1);
			return;
		}
	}
	if ($file eq "") {
		print "<h3>Select a File First!</h3>\n";
		&index(1);
		return;
	}
	print $query->start_form();
	print "<h4>File Name Is: $file</h4>\n";
	print "<h3>Instructions</h3>\n";
	print "<strong>Use the text field below</strong> (after the instructions) ";
	print "to edit the text of the page. Then click on the </strong>Update This ";
	print "Page</strong> button beneath it. Please use <strong>blank ";
	print "lines</strong> to separate <strong>paragraphs</strong>.\n";
	print "<p>\n";
	print "<strong>\"What is all that &lt;FONT&gt; and &lt;A HREF...&gt;\n";
	print "stuff about?\"</strong><p>\n";
	print "Those are HTML tags. If you know ";
	print "<a href=\"http://werbach.com/barebones/\">HTML</a>, feel free to ";
	print "sprinkle in HTML tags. Keep in mind that your tags will ";
	print "already be in the \"body\" part of the page. ";
	print "If you don't, just use blank lines to separate paragraphs;\n";
	print "edit the text all you like, but leave any HTML you don't\n";
	print "understand just the way it is.\n<p>\n";
	print "<strong>\"What if I want to add an image?\"</strong><p>\n";
	print "Please email the image to ";
	&mailAdmin;
	print " as an attachment and let him ";
	print "know where you want it to go. This is easy\n";
	print "to do in most mail programs.<p>\n";
	print "<strong>\"What if I don't have a scanner?\"</strong><p>\n";
	print "Give $adminName your photo at a meeting and he'll take care of\n";
	print "scanning it for you.<p>\n";
	if (!$create) {
		if (!open(IN, "$dir/$file")) {
			print "<h3>Sorry, that filename cannot be edited.</h3>\n";
			print "The filename was: $file<p>\n";
			print "Please report this problem to ";
			&mailAdmin;
			print ".\n";
			return;
		}
	} else {
		open(IN, "$dir/template.html");
	}
	while ($line = <IN>) {
		if ($line =~ /\<!-- BEGIN USER BODY --\>/) {
			my($rawText);
			while ($line = <IN>) {
				if ($line =~ /\<!-- END USER BODY --\>/) {
					last;
				}
				$rawText .= $line;
			}
			# Clobber all line breaks initially
			$rawText =~ s/\r\n/\n/g;
			$rawText =~ s/\r/\n/g;
			$rawText =~ s/\n/ /g;
			$rawText =~ s/\s+/ /g;
			# Newline after every tag
			$rawText =~ s/\>/\>\n/g;
			# Clobber spaces following newlines and at the
			# start of the document
			$rawText =~ s/^ //g;
			$rawText =~ s/\n /\n/g;
			print STDERR $rawText;
			# Word wrap
			my(@lines) = split(/\n/, $rawText);
			for $line (@lines) {
				while (length($line) > 50) {
					my($where) = rindex($line, " ", 50);
					if ($where == -1) {
						last;
					}	
					$text .= substr($line, 0, $where) .
						"\n";
					$line = substr($line, $where + 1);	
				}
				$text .= $line . "\n";
			}
		}
	}	
	close(IN);
	$text =~ s/\<p\>/\n\n/ig;
	$text =~ s/\<\/p\>/\n\n/ig;
	$text =~ s/\n\n\n+/\n\n/g;
	print $query->hidden(-name=>'file',
		-value=>$file);
	print $query->textarea(-name=>'text',
		-default=>$text,
		-rows=>12,
		-columns=>60);
	print $query->submit(-name=>"editsubmit", -value=>"Update This Page");
	print $query->end_form();
	print "<hr>\n";
	print "<a href=\"../index.html\">Ciel Home Page</a>\n";
}

sub editSubmitPage
{
	my($file) = @_;
	if ($file !~ /^[\w\.]+html$/) {
		print "<h3>Sorry, that filename cannot be edited.</h3>\n";
		print "The filename was: $file<p>\n";
		print "Please report this problem to ";
		&mailAdmin;
		print ".\n";
		return;
	}
	if (!open(OUT, ">$dir/$file")) {
		print "<h3>Sorry, that filename cannot be opened ",
			"for writing.</h3>\n"; 
		print "The filename was: $file<p>\n";
		print "Please report this problem to ";
		&mailAdmin;
		print ".\n";
		return;
	}
	my($text) = $query->param('text');
	# Change blank lines to Unix format
	$text =~ s/\r\n/\n/g;
	$text =~ s/\r/\n/g;
	# Now convert double blank lines to paragraphs
	$text =~ s/\n\n/\<p\>/g;	
	open(TEMPLATE, "$dir/template.html");
	while ($line = <TEMPLATE>) {
		if ($line =~ /^BODY GOES HERE/) {
			print OUT "<!-- BEGIN USER BODY -->\n";
			print OUT $text, "\n";
			print OUT "<!-- END USER BODY -->\n";
		} else {
			print OUT $line;
		}		
	}
	close(TEMPLATE);
	close(OUT);
	print "<h3>File Updated</h3>\n";
	print "The file has been successfully updated.\n"; 
	print "It would be a good idea to ";
	print "<a href=\"../$file\"><strong>test it</strong></a>. <strong>IMPORTANT: AFTER\n";
	print "YOU CLICK ON \"TEST IT\", YOU MIGHT HAVE\n";
	print "TO CLICK \"RELOAD\" OR \"REFRESH\" IN YOUR BROWSER</strong>\n";
	print "if the page does not look different right away!\n";
	print "<p>\n";
	print "<a href=\"../index.html\">Ciel Home Page</a><p>\n";
	print "<a href=\"editpage.cgi\">Edit More Files</a><p>\n";
}

sub mailAdmin
{
	print "<a href=\"mailto:$adminEmail\">$adminName ";
	print "($adminEmail)</a>";
}