#!/dcs/bin/perl
######################################################
# upload a file with netscape 2.0+ or IE 4.0+
# Muhammad A Muquit
# When: Long time ago
# Changelog:
# James Bee" <JamesBee@home.com> reported that from Windows filename
# such as c:\foo\fille.x saves as c:\foo\file.x, Fixed, Jul-22-1999
######################################################

use strict;
use CGI;

$|=1;

my $version="V1.1";

## vvvvvvvvvvvvvvvvvvv MODIFY vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv

# the text database  of the user. The text database contains the colon 
# separated items, namely  login:encrypted password:upload path
# example: muquit:fhy687kq1hger:/usr/local/web/upload/muquit
# if no path is specified, the file must be located in the cgi-bin directory.

my $g_upload_db="upload.db";

# overwrite the existing file or not. Default is to overwrite
# chanage the value to 0 if you do not want to overwrite an existing file.
my $g_overwrite=1;

## ^^^^^^^^^^^^^^^^^^^ MODIFY ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



#-------------- globals---------- STARTS ------------------
my $query=new CGI;
my $g_debug=0;
my $progName=".";

my $g_title="File upload";
my $g_upload_path='/ece/ece35/class/ece145ta/www/upload';

my $debugPrefix = "";
my $rosterDB = "roster.db";	# name and student ID
my $uploadDB = "upload.db";	# 8-digit ID and file name

my @students=();
my %sInfo = ();	# multiply indexed by $id, 'name' or 'email'

my @submittedStu = ();
my %fInfo = (); # multiply indexed by $id, 'filename'

my $deadline = "Mar 17 17:30:00 2001";
#-------------- globals----------  ENDS  ------------------


print $query->header;

# Java Script for form validation
#
my $JSCRIPT=<<EJS;

var returnVal=true;
var DEBUG=0;

//===========================================================================
// Purpose: check if field is blank or NULL
// Params:
//  field (IN)
//  errorMsg (IN - MODIFIED)
//  fieldTitle (IN)
// Returns:
//  errorMsg - error message
// Globals:
//  sets global variable (returnVal) to FALSE if field is blank or NULL
// Comments:
//  JavaScript code adapted from netscape software registration form.
//  ma_muquit\@fccc.edu, May-09-1997
//===========================================================================

function ValidateAllFields(obj)
{
   returnVal = true;
   errorMsg = "The required field(s):\\n";

   // make sure all the fields have values
   if (isSomeFieldsEmpty(obj) == true) 
   {
     // DISPLAY ERROR MSG
     displayErrorMsg();
     returnVal = false;
   }

   if (returnVal == true)
     document.forms[0].submit();
   else
     return (false);
}

//===========================================================================
function displayErrorMsg()
{
   errorMsg += "\\nhas not been completed.";
   alert(errorMsg);
}

//===========================================================================
function isSomeFieldsEmpty(obj)
{
    var
        returnVal3=false;



// check if login is null
   if (obj.userid.value == "" || obj.userid.value == null)
   {
       errorMsg += " " + "Userid" + "\\n";
       returnVal3=true;
   }

// check if Password is null

   if (obj.password.value == "" || obj.password.value == null)
   {
       errorMsg += " " + "Password" + "\\n";
       returnVal3=true;
   }

// check if upload_file is null
   if (obj.upload_file.value == "" || obj.upload_file.value == null)
   {
       errorMsg += " " + "Upload filename" + "\\n";
       returnVal3=true;
   }

   return (returnVal3);
}

EJS
;


# print the HTML HEADER
&printHTMLHeader;

if ($query->path_info eq "/author")
{
    &printForm;
    &printAuthorInfo;
    return;
}

if ($query->param)
{
    &doWork();
}
else
{
    &printForm();
}

&printHTMLTrailer();

# end of mail file


sub printHTMLTrailer {
	my $e3 = "http://e3.uci.edu";
	print << "EOF";
<hr>
<address>Back to <a href="$e3/01w/15278/">ECE 145</a> homepage
</address>
<table cellspacing="0" cellpadding="0" border="0" width="100%">
<tr height="20">
<td align="center" height="20"><font size="2"><b>[
  <a href="$e3/">EEE Home</a>
| <a href="http://www.uci.edu/">UCI Home</a>
| <a href="$e3/search/">Site Search</a>
| <a href="$e3/help/">Help</a> ] </b></font></td>
</tr>
<tr height="20">
<td height="20"><font size="1"><i>Links on these pages to commercial sites
do not represent endorsement by the University of California or its affiliates.
See <a href="http://www.abs.uci.edu/depts/mailrec/uci-ppm/pols/800-16.html">UCI
Administrative Policies &amp; Procedures Section 800-16</a> for the
World Wide Web Publishing Policy</i></font></td>
</tr>
</table>
</body></html>
EOF
;
}

##-----
# printForm() - print the HTML form
##-----
sub printForm
{

    print "<center>\n";
    print "<table border=0 bgcolor=\"#c0c0c0\" cellpadding=5 cellspacing=0>\n";

    print $query->start_multipart_form,"\n";

    #------------- userid
    print "<tr>\n";
    print "<td align=\"right\">\n";
    print "UCINetID:\n";
    print "</td>\n";
    
    print "<td>\n";
    print $query->textfield(-name=>'userid',
            -size=>20);
    print "</td>\n";

    print "</tr>\n";

    #------------- password
    print "<tr>\n";
    print "<td align=\"left\">\n";
    print "8-digit student ID:\n";
    print "</td>\n";
    
    print "<td>\n";
    print $query->password_field(-name=>'password',
            -size=>20);
    print "</td>\n";
    
    print "</tr>\n";

    #------------- upload
    print "<tr>\n";
    print "<td align=\"right\">\n";
    print "Upload file:\n";
    print "</td>\n";
    
    print "<td>\n";
    print $query->filefield(-name=>'upload_file',
            -size=>30,
            -maxlength=>280);
    print "</td>\n";
    print "</tr>\n";



    #------------- submit
    print "<tr>\n";
    print "<td colspan=2 align=\"center\">\n";
    print "<hr noshade size=1>\n";
    print $query->submit(-label=>'Upload',
            -value=>'Upload',
            -onClick=>"return ValidateAllFields(this.form)"),"\n";
    print "</td>\n";
    print "</tr>\n";



    print $query->endform,"\n";

    print "</table>\n";
    print "</center>\n";
}


# read from the roster file. it has student ID, name, and email
sub readRoster {
	unless (open(RBF, "$debugPrefix$rosterDB")) {
		&printError("Warning: Could not open roster file");
		return;
	}
	while (<RBF>) {
		if (!/\S+/) { next; }
		chomp;
		my ($sid, $name, $email) = split(/\t/);
		my ($userid, $domain) = split (/@/, $email);
		# $sid ~= /\s//g; $name ~= /\s*$//g; $email ~= /\s//g;
		push(@students, $sid);
		$sInfo{$userid,'name'} = $name;
		$sInfo{$userid,'sid'} = $sid;
		$sInfo{$userid,'email'} = $email;
	}
}


sub printHTMLHeader {
    print $query->start_html(
            -title=>"$g_title",
            -script=>$JSCRIPT,
	    -bgcolor=>"#ffffff"
    #-link=>"#ffff00", -vlink=>"#00ffff", -alink=>"#ffff00", -text=>"#000000"
	);
	print << "EOF";
<center>
<h4>ENGRECE 145</h4>
<h3>Senior Design Project</h3>
<p>Course Number: ENGRECE 145, Quarter: w01, Course Code: 15278</p>
<h4><i>
<table border="4" cellpadding="0" cellspacing="2">
<tr>
<th>Instructor</th>
<td><a href="http://www.ece.uci.edu/~chou/">P. Chou</a> <i>(<a href="mailto:phchou\@uci.edu">PHCHOU\@uci.edu</a>) </i></td>
</tr>
</table>
</i></h4>
</center>
<div align="left"> 
    <h4>Final Project Report Submission (due by <font color="#FF0000">5pm Sat 3/17</font>) </h4>
</div>
<blockquote> 
  <center>
    <div align="left">1. Final report in <font color="#FF0000">PDF</font> format</div>
    <div align="left">2. An archive file (.tar, .zip, .tar.gz, or .sit ) which contains <font color="#FF0000">ALL</font>  your related web pages, images, source files, any library and executables. (Re-submissions are allowed. Only the latest version is accepted.)</div>
  </center>
  <center>
    <div align="left">(click <a href="winps.html">here</a> to learn how to generate postscript files and 
      use <a href="http://embedded.ece.uci.edu/%7Epdf/cgi/in.pl">this page</a> 
      to convert a postscript file to a PDF file.)</div>
  </center>
</blockquote>
EOF
;
}


##-------
# doWork() - upload file 
##-------
sub doWork
{
    ##################
    my $em='';
    ##################


    # import the paramets into a series of variables in 'q' namespace
    $query->import_names('q');
    #  check if the necessary fields are empty or not
    $em .= "<br>You must specify your Userid!<br>" if !$q::userid;
    $em .= "You must specify your Password!<br>" if !$q::password;
    $em .= "You must select a file to upload!<br>" if !$q::upload_file;

    my $rc=0;
    my ($u,$p);
    my $userid=$query->param('userid');
    $userid =~ tr/a-z/A-Z/;
    my $plain_pass=$query->param('password'); 
    my $filename='';  
    
    &printForm();
    if ($em) { &printError($em); return;   }
    
    &readRoster(); 

    if ($sInfo{$userid,'sid'} ne $plain_pass)
    {
        &printError("Will not upload! Could not validate Userid: $q::userid");
        return;
    }

    my $filepath=$query->param('upload_file');

    if ($filepath =~ /([^\/\\]+)$/)     {
        $filename="$1";
    } else {
        $filename="$filepath";
    } 
    $filename =~ s/\s+//g;
    
#    if ($filename =~ /pdf$/) {;} else
#    {
#        &printError("Will not upload! File should be in .pdf format.");
#        return;
#    }

    # now upload file
    &uploadFile();
    
    &updateDB($plain_pass,$sInfo{$userid,'name'}, $filename); 

    # if (isLate()) { printError("Late submission"); }
}

##--------
# islate()
##--------
# check if the submission misses the deadline
sub isLate
{
    my $islate ;
    require 'ctime.pl';
    my $getctime = &ctime(time);
    $getctime =~ s/(\s)+/$1/g ;
    my ($date, $mon, $day, $time, $timeZone, $year ) = split (/\s/, $getctime);
    my ($mymon, $myday, $mytime, $myyear) = split(/\s/, $deadline);
    if ( $myyear <= $year and $mymon le $mon and $myday <= $day) {
    	if ( $mytime le $time) {  $islate = 0;}
    } else { $islate = 1; }
	printText($mymon."|".$myday."|".$mytime."|".$myyear."\n");
    return $islate;
}
  

##--------
# uploadFile()
##--------
sub uploadFile
{
    my $bytes_read=0;
    my $size='';
    my $buff='';
    my $start_time;
    my $time_took;
    my $filename='';
    my $filepath='';
    my $write_file='';

    $filepath=$query->param('upload_file');
    my $plain_pass=$query->param('password'); 

    if ($filepath =~ /([^\/\\]+)$/)     {
        $filename="$1";
    } else {
        $filename="$filepath";
    } 
    $filename =~ s/\s+//g;

    $write_file="$g_upload_path" . "/"  . "$plain_pass" . "_"."$filename";    

    print "Filename=$filename<br>\n" if $g_debug;
    print "Writefile= $write_file<br>\n" if $g_debug;

    if ($g_overwrite == 0)
    {
        if (-e $write_file)
        {
            &printError("File $filename exists, will not overwrite!");
            return;
        }
    }

    if (!open(WFD,">$write_file"))
    {
        &printError("Error opening file for writing");
        return;
    }

    $start_time=time();
    while ($bytes_read=read($filepath,$buff,2096))
    {
        $size += $bytes_read;
        binmode WFD;
        print WFD $buff;
    }

    print "size= $size<br>\n" if $g_debug;

    close(WFD);

    if ((stat $write_file)[7] <= 0)
    {
        unlink($write_file);
        &printError("Could not upload file: $filename");
        return;
    }
    else
    {
        $time_took=time()-$start_time;
    print<<EOF;
<center>
    <hr noshade size=1 width="90%">
        <table border=0 bgcolor="#c0c0c0" cellpadding=0 cellspacing=0>
        <tr>
            <td>
                <table border=0 width="100%" cellpadding=10 cellspacing=2>
                    <tr align="center">
                        <td bgcolor="#000099" width="100%">
                        <font color="#ffffff">
                        File 
                        <font color="#00ffff"><b>$filename</b></font> of size 
                        <font color="#00ffff"><b>$size</b></font> bytes is 
                        uploaded successfully!
                        </font>
                        </td>
                    </tr>
                </table>
            </td>
        </tr>
            
        </table>
</center>
EOF
;
    }
}


sub updateDB
{
    my ($id,$name, $fn) = @_ ;
    
    unless (open(RBF, ">>"."$debugPrefix$uploadDB")) {
                touch("$debugPrefix$uploadDB");                
        }
    print RBF "$id:$name:$fn\n";
    close(RBF);
}


##------
# printError() - print error message
##------
sub printError
{
    my $em=shift;
    print<<EOF;
<center>
    <hr noshade size=1 width="80%">
        <table border=0 bgcolor="#000000" cellpadding=0 cellspacing=0>
        <tr>
            <td>
                <table border=0 width="100%" cellpadding=5 cellspacing=1>
                    <tr">
                        <td bgcolor="#ffefd5" width="100%">
                        
                        <font color="#ff0000"><b>Error -</b></font>
                        $em</td>
                    </tr>
                </table>
            </td>
        </tr>
            
        </table>
</center>
EOF
;
}


sub printAuthorInfo
{
    my $url="http://www.fccc.edu/users/muquit/";
    my $upl_url="$url" . "upload/upload.html";
    print<<EOF;
<center>
    <hr noshade size=1 width="90%">
        <table border=0 bgcolor="#c0c0c0" cellpadding=0 cellspacing=0>
        <tr>
            <td>
                <table border=0 width="100%" cellpadding=10 cellspacing=2>
                    <tr align="center">
                        <td bgcolor="#000099" width="100%">
                        <font color="#ffffff">
                        <a href="$upl_url">
                        upload.pl</a> $version by 
                        <a href="$url">Muhammad A Muquit</A>
                        </font>
                        </td>
                    </tr>
                </table>
            </td>
        </tr>
            
        </table>
</center>
EOF
;
}

sub printText {
my ($t)=@_;
print << "EOF"
<font color="#666699"><h3>$t</h3></font>
EOF
;
}

sub printAA {
	my %array = @_ ; my $key;  my $pointer = "->"; my $output = () ;
	foreach $key (sort keys (%array)) { 
		$output = $key.$pointer.$array{$key}; 
		&printText($output);
	}
}	


#    if ($g_debug == 1)
#    {
#        my @all=$query->param;
#        my $name;
#        foreach $name (@all)
#        {
#            print "$name ->", $query->param($name),"<br>\n";
#        }
#    }