#!/util/perl/bin/perl require( 'config.pl' ); &checkWritable; # Open & read the data file. open( hDataFile, "<$DATA_FILE" ) || die; flock( hDataFile, LOCK_SH ); @dataFile = ; flock( hDataFile, LOCK_UN ); close( hDataFile ); &parse; # If the administrator password was sent, but not the action specifier, then # check the password and show the database and options. if ( defined $FORM{'password'} && !defined $FORM{'action'} ) { &checkPassword( $FORM{'password'} ); &showDatabaseAndOptions( "" ); # If the administrator password was sent along with the action specifier, # then check the password and call the apropriate method to deal with the # requested action. } elsif ( defined $FORM{'password'} && defined $FORM{'action'} ) { &checkPassword( $FORM{'password'} ); if ( $FORM{'action'} eq 'delete_record' ) { &deleteRecord; } elsif ( $FORM{'action'} eq 'change_user_password' ) { &changeUserPassword; } elsif ( $FORM{'action'} eq 'create_new_user' ) { &createNewUser; } elsif ( $FORM{'action'} eq 'change_admin_password' ) { &changeAdminPassword; } else { print "Content-type: text/html\n\n"; print "
"; print "Internal error: invalid action specifier - $FORM{'action'}"; print "
"; } # If the administrator password was not present, then return a form to # send the password back to this script. } else { &promptForPassword; } # Explicitly clear the dataFile array from memory... just in case. undef @dataFile; exit( 0 ); sub checkPassword { # Crypt the sent password; retrieve the stored password. $sentPassword = crypt( $_[ 0 ], $SALT_CHARS ); $storedPassword = $dataFile[ 0 ]; chomp( $storedPassword ); # If the stored password does not match the crypted sent password... if ( !( $sentPassword eq $storedPassword ) ) { print "Content-type: text/html\n\n"; print "



Incorrect password.
"; exit( 0 ); } } sub promptForPassword { print "Content-type: text/html\n\n"; print "\n\n\nAuthorization required\n\n\n



\n\n"; print "
The administrator password is required to edit the user database.
\n\n"; print "
\n"; print "
\n"; print "
\n\n"; } sub showDatabaseAndOptions { print "Content-type: text/html\n\n"; print ""; ############################ $javaScript =<< "END_JAVASCRIPT"; END_JAVASCRIPT ############################ print $javaScript; print "Administration


\n\n"; print "
"; if (!( $_[ 0 ] eq "" )) { print "
$_[ 0 ]
"; } print "\n"; print ""; print ""; print ""; print ""; print ""; # Start with the second entry (index #1), because the first entry (index #0) # is the administrator password. for( $p = 1; $p < scalar @dataFile; $p++ ) { @dataLine = split( /\|/, $dataFile[ $p ] ); print ""; print ""; print ""; print ""; print "\n"; undef $dataLine; } print "
Administrator 
$dataLine[ 0 ]
"; print "

Create a new roster entry:

"; print ""; print ""; print ""; print "
Name of new user:
 
"; print ""; print ""; print ""; print ""; print "




View Roster
"; } sub deleteRecord { $record = int( $FORM{'record'} ); if ( $record <= 0 ) { $record = 1; } if ( $record >= scalar @dataFile ) { $record = 1; } # Remove the specified record, and re-write the database. for( $p = 0; $p < $record; $p++ ) { push( @tempArray, $dataFile[ $p ] ); } for( $p = $record + 1; $p < scalar @dataFile; $p++ ) { push( @tempArray, $dataFile[ $p ] ); } open( hDataFile, ">$DATA_FILE" ) || die; flock( hDataFile, LOCK_EX ); print hDataFile @tempArray; flock( hDataFile, LOCK_UN ); close( hDataFile ); @dataFile = @tempArray; &showDatabaseAndOptions( "Deleted record." ); } sub changeUserPassword { $record = int( $FORM{'record'} ); if ( $record <= 0 ) { $record = 1; } if ( $record >= scalar @dataFile ) { $record = 1; } $cryptedUserPassword = crypt( $FORM{'userPassword'}, $SALT_CHARS ); $theLine = $dataFile[ $record ]; @dataFields = split( /\|/, $theLine ); $dataFields[ 11 ] = $cryptedUserPassword; $theUser = $dataFields[ 0 ]; $theLine = join( '|', @dataFields ); undef @dataFields; for( $p = 0; $p < $record; $p++ ) { push( @tempArray, $dataFile[ $p ] ); } push( @tempArray, $theLine ); undef $theLine; for( $p = $record + 1; $p < scalar @dataFile; $p++ ) { push( @tempArray, $dataFile[ $p ] ); } @dataFile = @tempArray; undef @tempArray; open( hDataFile, ">$DATA_FILE" ) || die; flock( hDataFile, LOCK_EX ); print hDataFile @dataFile; flock( hDataFile, LOCK_UN ); close( hDataFile ); &showDatabaseAndOptions( "Successfully changed password for \"$theUser\"." ); } sub createNewUser { $cryptedUserPassword = crypt( $FORM{'userPassword'}, $SALT_CHARS ); $newEntry = "$FORM{'newUserName'}|||||||||||$cryptedUserPassword|\n"; open( hDataFile, ">>$DATA_FILE" ) || die; flock( hDataFile, LOCK_EX ); print hDataFile $newEntry; flock( hDataFile, LOCK_UN ); close( hDataFile ); push( @dataFile, $newEntry ); &showDatabaseAndOptions( "Successfully created user \"$FORM{'newUserName'}\"." ); } sub changeAdminPassword { $cryptedAdminPassword = crypt( $FORM{'userPassword'}, $SALT_CHARS ); $dataFile[ 0 ] = $cryptedAdminPassword . "\n"; # Open & save the data file. open( hDataFile, ">$DATA_FILE" ) || die; flock( hDataFile, LOCK_EX ); print hDataFile @dataFile; flock( hDataFile, LOCK_UN ); close( hDataFile ); $FORM{'password'} = $FORM{'userPassword'}; &showDatabaseAndOptions( "Administrator password successfully changed." ); }