#!/usr/bin/perl
##############################################################################
# FormMail      Version 1.6        #
# Copyright 1995-1997 Matt Wright mattw@worldwidemart.com     #
# Created 06/09/95    Last Modified 05/02/97      #
# Matt's Script Archive, Inc.: http://www.worldwidemart.com/scripts/  #
##############################################################################
# COPYRIGHT NOTICE               #
# Copyright 1995-1997 Matthew M. Wright All Rights Reserved.    #
#                   #
# FormMail may be used and modified free of charge by anyone so long as this #
# copyright notice and the comments above remain intact. By using this  #
# code you agree to indemnify Matthew M. Wright from any liability that  #
# might arise from its use.             #
#                   #
# Selling the code for this program without prior written consent is   #
# expressly forbidden. In other words, please ask first before you try and #
# make money off of my program.            #
#                   #
# Obtain permission before redistributing this software over the Internet or #
# in any other medium.In all cases copyright and header must remain intact #
##############################################################################
# Modified to encrypt output with PGP (pref v5.0i)       #
# by Andrew Spiers, Namecity (andy@namecity.com) 13th April 1999    #
##############################################################################

$mailprog = '/usr/sbin/sendmail';
$pgpecmd = '/usr/local/bin/gpg';
$ENV{'HOME'} = '/home/gpg';
$filedate = `/bin/date +%s`;
chomp $filedate;
$pgptmp = "/tmp/" . $filedate . "-pgptmp";

@referers = ('www.mywebsite.co.uk', 'my.ip.add.ress');

print STDERR "Home directory: $ENV{'HOME'} \n";

##############################################################################

# Check Referring URL
&check_url;

# Retrieve Date
&get_date;

# Parse Form Contents
&parse_form;

# Check Required Fields
&check_required;

# Return HTML Page or Redirect User
&return_html;

# Send E-Mail
&send_mail;

sub check_url {

 # Localize the check_referer flag which determines if user is valid.  #
 local($check_referer) = 0;

 # If a referring URL was specified, for each valid referer, make sure #
 # that a valid referring URL was passed to FormMail.      #

 if ($ENV{'HTTP_REFERER'}) {
  foreach $referer (@referers) {
   if ($ENV{'HTTP_REFERER'} =~ m|https?://([^/]*)$referer|i) {
    $check_referer = 1;
    last;
   }
  }
 }
 else {
  $check_referer = 1;
 }

 # If the HTTP_REFERER was invalid, send back an error.     #
 if ($check_referer != 1) { &error('bad_referer') }
}

sub get_date {

 # Define arrays for the day of the week and month of the year.   #
 @days = ('Sunday','Monday','Tuesday','Wednesday',
    'Thursday','Friday','Saturday');
 @months = ('January','February','March','April','May','June','July',
   'August','September','October','November','December');

 # Get the current time and format the hour, minutes and seconds. Add #
 # 1900 to the year to get the full 4 digit year.       #
 ($sec,$min,$hour,$mday,$mon,$year,$wday) = (localtime(time))[0,1,2,3,4,5,6];
 $time = sprintf("%02d:%02d:%02d",$hour,$min,$sec);
 $year += 1900;

 # Format the date.              #
 $date = "$days[$wday], $months[$mon] $mday, $year at $time";

}

sub parse_form {

 # Define the configuration associative array.       #
 %Config = ('recipient','',   'subject','',
    'email','',    'realname','',
    'redirect','',   'bgcolor','',
    'background','',   'link_color','',
    'vlink_color','',  'text_color','',
    'alink_color','',  'title','',
    'sort','',    'print_config','',
    'required','',   'env_report','',
    'return_link_title','', 'return_link_url','',
    'print_blank_fields','', 'missing_fields_redirect','',
    'pgpkeyid','');

 # Determine the form's REQUEST_METHOD (GET or POST) and split the form #
 # fields up into their name-value pairs. If the REQUEST_METHOD was  #
 # not GET or POST, send an error.          #
 if ($ENV{'REQUEST_METHOD'} eq 'GET') {
  # Split the name-value pairs
  @pairs = split(/&/, $ENV{'QUERY_STRING'});
 }
 elsif ($ENV{'REQUEST_METHOD'} eq 'POST') {
  # Get the input
  read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});
 
  # Split the name-value pairs
  @pairs = split(/&/, $buffer);
 }
 else {
  &error('request_method');
 }

 # For each name-value pair:            #
 foreach $pair (@pairs) {

  # Split the pair up into individual variables.      #
  local($name, $value) = split(/=/, $pair);
 
  # Decode the form encoding on the name and value variables.   #
  $name =~ tr/+/ /;
  $name =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;

  $value =~ tr/+/ /;
  $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;

  # If they try to include server side includes, erase them, so they
  # aren't a security risk if the html gets returned. Another 
  # security hole plugged up.
  $value =~ s/<!--(.|\n)*-->//g;

  # If the field name has been specified in the %Config array, it will #
  # return a 1 for defined($Config{$name}}) and we should associate #
  # this value with the appropriate configuration variable. If this #
  # is not a configuration form field, put it into the associative  #
  # array %Form, appending the value with a ', ' if there is already a #
  # value present. We also save the order of the form fields in the #
  # @Field_Order array so we can use this order for the generic sort. #
  if (defined($Config{$name})) {
   $Config{$name} = $value;
  }
  else {
   if ($Form{$name} && $value) {
    $Form{$name} = "$Form{$name}, $value";
   }
   elsif ($value) {
    push(@Field_Order,$name);
    $Form{$name} = $value;
   }
  }
 }