#!/usr/bin/perl
#  Worksheets Main CGI
#  (c) 2001, by Andrew Cantino
#  *Not for public distribution*

require 'parts.lib';
$thisScript = "$URLRoot/worksheets.cgi";

if ($in{'password'} eq "" || $in{'user'} eq "") {
	&showLogin;
} else {
	unless (&correctUserPassword($in{'user'}, $in{'password'})) {
		&showLogin("Incorrect Password");
	}
	unless (&isActive($in{'user'})) {
		&safedie("Sorry, $in{'user'} is currently disabled.");
	}
}

if (&CheckFile("$userDIR/$in{'user'}")) {
	&GetData("$userDIR/$in{'user'}");
	$FILEDATA{'LastLogin'} = $date;
	&StoreData("$userDIR/$in{'user'}", 1);
} else {
	&safedie("Unable to access the user file for $in{'user'}.");
}

$user = $in{'user'};
&varifyUser($user);
$password = $in{'password'};
$worksheet = $in{'worksheet'};

$mode = $in{'mode'};
if ($mode eq "") {
	&showMenu;
} elsif ($mode eq "startEditWorksheet") {
	&startEditWorksheet;
} elsif ($mode eq "showChangeEmail") {
	&printHTMLHeader;
	&header("Change Password");
	print "<form method=post action=$thisScript>\n";
	print "E-mail Address: <input type=text name=email value=\"" . &userEmail($user) . "\"><br>\n";
	print "<input type=hidden name=mode value=doChangeEmail>\n";
	print "<input type=hidden name=user value=\"$user\">\n";
	print "<input type=hidden name=password value=\"$password\">\n";
	print "<input type=submit name=submit value=\"Continue\"></form><p><p>\n";
	&back;
	&footer;
	exit;
} elsif ($mode eq "doChangeEmail") {
	if ($in{'email'} eq "") {
		&safedie("Please enter an e-mail address.");
	}
	unless (&varify($in{'email'}, 3)) {
		&safedie("Sorry, that is not a valid e-mail address.");
	}
	if (&CheckFile("$userDIR/$in{'user'}")) {
		&GetData("$userDIR/$in{'user'}");
		$FILEDATA{'Email'} = $in{'email'};
		&StoreData("$userDIR/$in{'user'}", 1);
	} else {
		&safedie("Unable to access the user file for $in{'user'}.");
	}
	&printHTMLHeader;
	&header("E-mail Address Changed");
	print "Your e-mail address was changed...<a href=\"$thisScript?user=$in{'user'}&password=$in{'password'}\">continue.</a>\n";
	&footer;
	exit;
} elsif ($mode eq "showChangePassword") {
	&printHTMLHeader;
	&header("Change Password");
	print "<form method=post action=$thisScript>\n";
	print "Enter new password: <input type=password name=password1><br>\n";
	print "Again: <input type=password name=password2><br>\n";
	print "<input type=hidden name=mode value=doChangePassword>\n";
	print "<input type=hidden name=user value=\"$user\">\n";
	print "<input type=hidden name=password value=\"$password\">\n";
	print "<input type=submit name=submit value=\"Continue\"></form><p><p>\n";
	&back;
	&footer;
	exit;
} elsif ($mode eq "doChangePassword") {
	if ($in{'password1'} eq "" || $in{'password2'} eq "") {
		&safedie("Please fill in both password fields.");
	}
	if ($in{'password1'} ne $in{'password2'}) {
		&safedie("Those passwords do not match.");
	}
	if (&CheckFile("$userDIR/$in{'user'}")) {
		&GetData("$userDIR/$in{'user'}");
		$FILEDATA{'Password'} = crypt($in{'password1'}, "ac");
		&StoreData("$userDIR/$in{'user'}", 1);
	} else {
		&safedie("Unable to access the user file for $in{'user'}.");
	}
	&printHTMLHeader;
	&header("Password Changed");
	print "Your password was changed...<a href=\"$thisScript?user=$in{'user'}&password=$in{'password1'}\">continue.</a>\n";
	&footer;
	exit;
} elsif ($mode eq "reportBug") {
	&printHTMLHeader;
	&header("Report Bug");
	print "<center><font size=+2>Report Bug</font></center>\n";
	print "<form method=post action=\"$thisScript\">\n";
	print "Bug Description: <input type=text name=bugReport><br>\n";
	print "<input type=hidden name=mode value=\"doReportBug\">\n";
	print "<input type=hidden name=password value=\"$in{'password'}\">\n";
	print "<input type=hidden name=user value=\"$in{'user'}\">\n";
	print "<input type=submit name=submit value=\"Continue\"></form>\n";
	&back;
	&footer;
	exit;
} elsif ($mode eq "doReportBug") {
	if ($in{'bugReport'} ne "") {
		&reportBug("$in{'user'} reported: $in{'bugReport'}");
		&printHTMLHeader;
		&header("Thank You");
		print "<center><font size=+2>Bug Reported, Thank you</font></center>\n";
		&back;
		&footer;
		exit;
	} else {
		&safedie("Please enter some text first.");
	}	
} else {
	&safedie("Unknown mode of '$mode.'");
}

sub showMenu {
	&printHTMLHeader;
	&header("Worksheet Online System");
	print "<center><font size=+2>Welcome to the Worksheet Online System</font></center>\n";
	print "<b>Worksheets for " . &currentQuarter . ", " . &datePart("year") . ":</b><br>\n";
	print "<table border=0>";
	@userGroups = &listGroupsForUser($user);
	foreach $wsheet (&listCurrentWorksheets) {
		unless (&isLockedWorksheet($wsheet)) {
			$c = 0;
			foreach $group (&listGroupsInWorksheet($wsheet)) {
				if (&isActiveGroup($group)) {
					if (&isIn($group, @userGroups)) {
						$c = 1;
					}
				}
			}
			if ($c) {
				print "<tr><td>$wsheet";
				if (&isLockedWorksheet($wsheet)) {
					print " -- Locked</td></tr>";
				} else {
					print "</td><td>[<a href=\"$thisScript?mode=startEditWorksheet&password=$password&user=$user&worksheet=$wsheet\">";
					print "Edit</a>]";
					print "<td></tr>\n";
				}
			}
		}
	}
	print "</table><p>\n";
	print "<hr>\n";
	print "<a href=\"$thisScript?mode=showChangeEmail&password=$password&user=$user\">Change E-mail Address</a><br>\n";
	print "<a href=\"$thisScript?mode=showChangePassword&password=$password&user=$user\">Change Password</a><br>\n";
	print "<a href=\"$thisScript?mode=reportBug&password=$password&user=$user\">Report Bug</a><br>\n";
	&footer;
	exit;
}

sub startEditWorksheet {
	&varifyWorksheet($worksheet);
	&printHTMLHeader;
	&header("Worksheet Online System: Group Selection");
	print "<center><font size=+2>Group Selection</font></center>\n";
	print "<table border=0>";
	@userGroups = &listGroupsForUser($user);
	print "<form method=post action=$viewCGI>\n";
	print "Select which group to use: <select name=groupToUse>\n";
	foreach $group (&listGroupsInWorksheet($worksheet)) {
		if (&isActiveGroup($group)) {
			if (&isIn($group, @userGroups)) {
				print "<option value=\"$group\">$group\n";
			}
		}
	}
	print "</select>\n";
	print "<input type=hidden name=worksheet value=$worksheet>\n";
	print "<input type=hidden name=user value=\"$user\">\n";
	print "<input type=hidden name=password value=\"$password\">\n";
	print "<input type=submit name=submit value=\"Continue\"></form><p><p>\n";
	&back;
	&footer;
	exit;
}

sub back {
	print "<a href=\"$thisScript?user=$user&password=$password\">Back</a>\n";
}

sub showLogin {
	&printHTMLHeader;
	&header("Worksheets Login");
	print "<hr><b>$_[0]</b><hr>\n" if ($_[0] ne "");
	print "<center><font size=+2>Worksheets Login</font></center>\n";
	print "<form method=post action=\"$thisScript\">\n";
	print "User nickname: <input type=text name=user><br>\n";
	print "Password: <input type=password name=password><br>\n";
	print "<input type=submit name=submit value=\"Login\"></form>\n";
	&footer;
	exit;
}