#Discus board post script (board-post.cgi)
#-------------------------------------------------------------------------------
#This script is copyright (c) 1997-98 by Kevin W. Paulisse and William F. Polik,
#all rights reserved.  You may not modify or delete this copyright header.
#The use of this product is subject to a license agreement.  Contact Kevin
#Paulisse (paulisse@mulliken.chem.hope.edu) for further information.
#-------------------------------------------------------------------------------

#######################################################
# E-Mail Notification where requested
# 1=On 0=Off

# This variable is now set in the "discus.conf" file.

#######################################################
# Double post protection
# 1=On 0=Off

$double_post_protection_enabled = 1;
$double_post_threshold = 120; #in seconds

#######################################################
# Possible formatting errors (whether to display this
# new screen that points out possible oopses)
# 1=On 0=Off

$possible_formatting_errors_notify = 1;

#######################################################
# Display IP host/address on post.  Pretty self
# explanatory what this does -- it puts it in
# parentheses after the post.
# 1=On 0=Off

$ip_address_on_posts = 0;

#######################################################
# Discussion order:  where are new messages/subtopics
# added?  Default is to add them at the bottom of the
# list to go in chronological order.  Changing these
# could make a structured board become chaotic, and it
# is our preference not to change them.  However, it's
# ultimately up to you.
# 1=Bottom 0=Top

$new_messages_go = 1; #when adding a new message
$new_subtopics_go = 1; #when creating a new conversation

#######################################################
# Reply by e-mail: some people have been given a script
# to intercept incoming mail messages and process them
# as Discus messages.  To permit this, the following
# variable must be set to 1.
# 1=On                  0=Off [Default]

$reply_by_email = 0;
$replyto = '';

#######################################################
# SCRIPT BEGINS HERE...

open (FILE, "$discus_conf");
@file = <FILE>;
close (FILE);
$evals = "";
foreach $line (@file) {
	if ($line =~ /^(\w+)=(.*)/) {
		$varname = $1;
		$value = $2;
		$value =~ s/'/\\'/g;
		$evals .= "\$$varname='$value'; ";
	}
}
eval($evals);
require "$admin_dir/source/src-board-subs-common";

&parse_form;
&read_cookie;
$FORM{'name'} = $FORM{'username'} if $FORM{'username'} ne "";
$FORM{'number'} = $FORM{'passwd'} if $FORM{'passwd'} ne "";
$email_notification = 0 if $windows;
$adminappend = "?username=$FORM{'name'}";
$adminappend .= "&HTTP_REFERER=$FORM{'HTTP_REFERER'}&action=page_editor#Messages";

if ($ENV{'HTTP_REFERER'} =~ /\.$cgi_extension/i || $FORM{'HTTP_REFERER'}) {
	$_ = $FORM{'HTTP_REFERER'};
	s/#(.*)//g;
} else {
	$_ = $ENV{'HTTP_REFERER'};
	$FORM{'HTTP_REFERER'} = $_;
	s/#(.*)//g;
}

$FORM{'name'} =~ s/[\(\)]//g;

$username_input = $FORM{'name'};
&extract ($_) if $_ ne "";
$name2 = $username_input; $name2 =~ tr/A-Z/a-z/;
$number2 = $FORM{'number'}; $number2 =~ tr/A-Z/a-z/;
$passwordline = &check_password_and_permissions($name2, $number2, $owner);
($username, $encpass, $email, $fullname,$foo,$foo,$foo,$groupname) = split(/:/, $passwordline);
$groupname = "MODERATOR" if $groupname eq "";
$groupname = "" if $username eq "";
$username = "public user" if $username eq "";
$name = $FORM{'name'};
$FORM{'name'} =~ tr/A-Z/a-z/;
$name =~ s/[^\w\s\.\(\)\-]//g;
open (PASSWD, "$admin_dir/users.txt") || &error_message("File Error", "Cannot open user password file (users.txt)!");
@passwd = <PASSWD>;
close (PASSWD);
@users = grep(/:$owner\n?$/, @passwd);
$email_notification = 0 if (grep(/^DISABLEEMAIL:/, @users));

if ($FORM{'Anon'} eq "on") {
	if (!(grep(/^DISABLEANON:/, @users))) {
		$postby = "$L{BPANONYMOUS}";
	} else {
		$warnanon = 1;
		$FORM{'Anon'} = "";
	}
}

if ($FORM{'Anon'} ne "on") {
	if (!(grep(/^DISABLESTAMP:/, @users))) {
		$postby = "\u$name";
		if ($fullname ne "" && $fullname ne "fullname" && $fullname ne "none") {
			$postby = $fullname;
			$namelc = $fullname; $namelc =~ tr/A-Z/a-z/;
			$postby .= " (\u$username)" if $namelc ne $username;
		}
		$postby = join("", "<A HREF=\"mailto:$email\">", $postby, "</A>") if ($email ne "" && $email ne "email" && $email ne "none");
		if ($username eq "public user") {
			$postby = join("", "<A HREF=\"mailto:$1\@$2\">", $postby, "</A>") if $FORM{'email'} =~ m|^([\w\.\-\+]+)\@([\w\.\-\+]+)$|;
		}
	} else {
		$postby = "\u$name";
		$namelc = $name; $namelc =~ tr/A-Z/a-z/;
		$postby .= " (\u$username)" if $namelc ne $username;
	}
}

$rh = $ENV{'REMOTE_HOST'};
$rh =~ s/[<>]//g;
$ra = $ENV{'REMOTE_ADDR'};
$ra =~ s/[<>]//g;
$postby .= " ($rh - $ra)" if $ip_address_on_posts;

$FORM{'message'} =~ s/\s+$//;
$FORM{'message'} =~ s/\n{3,}/\n\n\n/g;

if ($FORM{"message"} !~ /\\(\S+)\{/) {
	$FORM{"message"} =~ s|(http://)([\w\-\.\+/~\%\?\&\=]+)|\\topurl\{$1$2,$1$2\}|gi;
	$FORM{"message"} =~ s|([\w\-\+\.]+)\@([\w\-\+\.]+)|\\mail\{$1\@$2,$1\@$2\}|gi;
}

if ($FORM{'subject'} ne "") {
	($newsubject) = &ex('webtags', $FORM{"subject"}, 3);
	$newsubj = 1;
}
($lint, $newmessage) = &ex('webtags', $FORM{"message"}, 0, 1);
$error_observed = 1;

if ($passwordline eq "invalid") {
	$newmessage = "<H3>$L{BPAUTHERROR}</H3>$L{BPAUTHERRORINVALID}";
} elsif ($postby eq "") {
	$newmessage = "<H3>$L{BPAUTHERROR}</H3>$L{BPAUTHERRORNONAME}";
} elsif ($FORM{'name'} !~ /\S/) {
	$newmessage = "<H3>$L{BPAUTHERROR}</H3>$L{BPAUTHERRORNONAME}";
} elsif ($FORM{"message"} eq "") {
	$newmessage = "<H3>$L{BPADDMSGERROR}</H3>$L{BPADDMSGERRORDESC}";
} elsif ($FORM{"new_conversation"} == 1 && $FORM{"subject"} eq "") {
	$newmessage = "<H3>$L{BPCREATEERROR}</H3>$L{BPCREATEERRORDESC}";
} else {
	$error_observed = 0;
}
$error_observed = 1 if $lint eq "!Error";
$message_hold = $FORM{'message'}; $message_hold =~ s/&/&amp;/g;
$message_hold =~ s/>/&gt;/g; $message_hold =~ s/</&lt;/g; $message_hold =~ s/"/&quot;/g;
$subject_hold = $FORM{'subject'}; $subject_hold =~ s/&/&amp;/g;
$subject_hold =~ s/>/&gt;/g; $subject_hold =~ s/</&lt;/g; $subject_hold =~ s/"/&quot;/g;

$p1 = $L{PREVIEW}; $p2 = $L{PREVIEW2};
$p1 = "x" x 100 if $L{PREVIEW} eq "";
$p2 = "x" x 100 if $L{PREVIEW2} eq "";
$p1 =~ s/^\s+//; $p1 =~ s/\s+$//;
$p2 =~ s/^\s+//; $p2 =~ s/\s+$//;
if ($FORM{'submit'} =~ /$p1/i || $FORM{'submit'} =~ /$p2/i || $error_observed == 1) {
	&header;
	($bgcolor, $text, $link, $vlink, $alink, $face, $size, $image) = &ex('extract_colorsonly', 1);
	$str = "$L{BPNORMALTITLE}";
	&ex('printuntil', 1, 1, $topic_number, "$L{BPNORMALTITLE}");
	print "<FORM Method=Post Action=\"$script_url/board-post.$cgi_extension\">\n";
	print "<FONT SIZE=+1><CENTER><B>$L{BPNORMALTITLE}</B></CENTER></FONT>\n" if $newsubj == 0;
	print "<FONT SIZE=+1><CENTER><B>$L{BPCREATETITLE}</B></CENTER></FONT>\n" if $newsubj == 1;
	print "<INPUT Type=hidden name=\"HTTP_REFERER\" value=\"$FORM{'HTTP_REFERER'}\">\n";
	print "<INPUT TYPE=HIDDEN NAME=\"new_conversation\" value=\"1\">\n" if $FORM{'new_conversation'} == 1;
	print "<INPUT Type=hidden name=\"isitok\" value=\"okiedokie\">\n" if $FORM{'isitok'} eq "okiedokie";
	print "<HR>\n";
	&ex('printuntil', 3, 3, $topic_number, $title);
	open (FILE, "$message_dir/$topic_number/$me_number.$ext");
	@file = <FILE>;
	close (FILE);
	if ($FORM{'isitok'} ne "okiedokie") {
		($navbar) = &ex('prepare_navbar', @file);
		$navbar =~ m|^(.*)</A>: |;
		$pre = join("", $1, "</A>: ");
		$url = "$message_url/$topic_number/$me_number.$ext";
		$newsubj = 1 if $FORM{'new_conversation'} == 1;
		$javastr = &JavaScript_prepare($me_name);
		$pre .= "<A HREF=\"$url\" onMouseOver=\"return setStatus('$L{RETURNTO}$javastr')\"><FONT COLOR=$vlink>$me_name</FONT></A>: ";
	} else {
		&extract("$FORM{'HTTP_REFERER'}");
		local (@array) = ("$topic_number:$topic_name");
		foreach $key (sort by_number keys(%level_number)) {
			push (@array, "$level_number{$key}:$level_name{$key}");
		}
		$pre = "<A HREF=\"$cgiurlm?username=$FORM{'name'}&action=mgr_1";
		$pre .= "&HTTP_REFERER=$page_referer\" onMouseOver=\"return setStatus('";
		$pre .= "Return to topic selection screen')\"><FONT COLOR=$link>Page Manager</FONT></A>:&nbsp;\n";
		foreach $line (@array) {
			($number,$name) = split(/:/, $line, 2);
			$pre .= "<A HREF=\"$cgiurlm?username=$FORM{'name'}&action=page_editor";
			$pre .= "&HTTP_REFERER=//$topic_number/$number.$ext\" onMouseOver=\"return ";
			$str = &JavaScript_prepare($name);
			$pre .= "setStatus('Return to editing $str')\"><FONT COLOR=$link>$name</FONT></A>: ";
		}
	}
	$pre .= "$L{BPCREATEDISPLAY}" if $newsubj == 1;
	$pre .= "$L{BPNORMALDISPLAY}" if $newsubj == 0;
	for ($i = 5; $i <= 9; $i += 2) {
		&ex('printuntil', $i, $i, $topic_number, $title);
	}
	print "<strong>$pre</strong>\n";
	print "<HR>\n";
	if (!($error_observed)) {
		print "<FONT SIZE=-1>$L{BPMESSAGEPOST}</FONT>" if $newsubj == 0;
		print "<FONT SIZE=-1>$L{BPCREATEPOST}</FONT>" if $newsubj == 1;
		print "<P>";
		if ($warnanon == 1) {
			print "$L{BPWARNANONYMOUS}<P>\n";
		}
		if ($lint ne "" && $possible_formatting_errors_notify == 1) {
			print "<FONT SIZE=+1><B>$L{BPPOSSIBLEFORMATTINGERRORS}</B></FONT><P>";
			print "<FONT SIZE=-1>$L{BPPOSSIBLEFORMATTINGERRORSDESC}";
			print "<P>\n";
			print "<OL>$lint</OL><P></FONT>\n";
		}
		&ex('printuntil', 11, 11, $topic_number, $title);
		print "<TABLE BORDER=1 WIDTH=97% HEIGHT=40%><TR><TD VALIGN=TOP><BASEFONT SIZE=$size><FONT FACE=\"$face\" SIZE=\"$size\" COLOR=$text>\n";
		if ($newsubj == 1) {
			print "<B>$L{BPSUBJECTTAG}</B> $newsubject<HR SIZE=0>\n";
		}
		$pb = $L{POSTBY};
		$postby = join("", "<BLINK>", $postby, "</BLINK>") if $warnanon == 1;
		($datetime) = &ex('get_date_time', "long");
		$pb =~ s/\%name/$postby/g;
		$pb =~ s/\%date/$datetime/g;
		print "$pb<P>\n";
	}
	print "$newmessage";
	if (!$error_observed) {
		print "</FONT></TD></TR>\n";
		print "</TABLE>\n";
		print "<HR>\n";
		print "<CENTER>\n";
		print "<INPUT Type=\"submit\" Name=submit VALUE=\"$L{BPPOSTTHISMESSAGE}\">\n" if !$error_observed;
		print "<INPUT TYPE=\"button\" VALUE=\"$L{BPCANCELPOST}\" onClick=\"window.location=";
		if ($FORM{'isitok'} ne 'okiedokie') {
			$url = "$message_url/$topic_number/$me_number.$ext";
			print "'$url'\">&nbsp;";
		} else {
			print "'$cgiurlm$adminappend'\">&nbsp;";
		}
		print "</CENTER>\n";
	} else {
		print "<BR><BR>\n";
	}
	print "<HR>\n";
	&ex('printuntil', 13, 13, $topic_number);
	$privpub = "private";
	open (USER, "$admin_dir/users.txt");
	@users = <USER>;
	close (USERS);
	@valid = grep(/:$owner\n?$/, @users);
	$privpub = "public" if grep(/^PUBLIC:/, @valid);
	open (FILE, "$admin_dir/addmessage-$privpub.txt");
	@file = <FILE>;
	close (FILE);
	foreach $line (@file) {
		$line =~ s/<!-FONT-!>/<FONT FACE="$face" SIZE="$size">/g;
		$line = "" if $line =~ m|FORM>|;
	}
	$am = $L{ADDMESSAGE};
	if ($newsubj == 1) {
		$flag = 0;
		foreach $line (@file) {
			if ($line =~ m|$am|i && $flag == 0) {
				print join("", $`, "$L{BPREVISESUBJECT}", $');
				$flag = 1;
			}
		}
		print "<H2>$L{BPREVISESUBJECT}</H2>\n" if $flag == 0;
		print "$L{BPFSUBJECT}<BR><BR>\n";
		print "<TABLE><TR><TD><INPUT TYPE=TEXT NAME=\"subject\" VALUE=\"$subject_hold\" SIZE=53></TD></TR></TABLE><P>\n";
		print "<HR>\n";
	}
	$flag = 0;
	foreach $line (@file) {
		if ($line =~ /<!-Conversation - LEAVE THIS HERE!-!>/) {
			$flag = 1;
		} elsif ($line =~ /<!-\/Identification/) {
			$flag = 0;
		} elsif ($flag == 1) {
			if ($line =~ /NAME="name" VALUE=""/i) {
				$line = join("", $`, "NAME=\"name\" VALUE=\"$username_input\"", $');
			} elsif ($line =~ /NAME="number" VALUE=""/i) {
				$line = join("", $`, "NAME=\"number\" VALUE=\"$FORM{'number'}\"", $');
				$line = "" if $FORM{'isitok'} eq "okiedokie";
			} elsif ($line =~ /NAME="Anon"/i) {
				$line = join("", $`, "NAME=\"Anon\" CHECKED", $') if $FORM{'Anon'} eq "on";
			} elsif ($line =~ /NAME="username" VALUE=""/i) {
				$line = join("", $`, "NAME=\"username\" VALUE=\"$username_input\"", $');
			} elsif ($line =~ /NAME="passwd" VALUE=""/i) {
				$line = join("", $`, "NAME=\"passwd\" VALUE=\"$FORM{'number'}\"", $');
				$line = "" if $FORM{'isitok'} eq "okiedokie";
			} elsif ($line =~ /NAME="email" VALUE=""/i) {
				$line = join("", $`, "NAME=\"email\" VALUE=\"$FORM{'email'}\"", $');
			} elsif ($line =~ /$am/i) {
				$line = join("", $`, "$L{BPREVISEMESSAGE}", $');
			}
			if ($line =~ m|</TEXTAREA>|i) {
				$line = join("", $`, $message_hold, $&, $');
			}
			print $line;
		}
	}
	print "<HR>\n";
	print "<CENTER>\n";
	print "<INPUT TYPE=\"submit\" Name=submit VALUE=\"$L{BPPREVIEWPOST}\">\n";
	print "<INPUT TYPE=\"button\" VALUE=\"$L{BPCANCELPOST}\" onClick=\"window.location=";
	if ($FORM{'isitok'} ne 'okiedokie') {
		$url = "$message_url/$topic_number/$me_number.$ext";
		print "'$url'\">\n";
	} else {
		print "'$cgiurlm$adminappend'\">&nbsp;";
	}
	print "</CENTER><HR></FORM>\n";
	&ex('printuntil', 15, 15, $topic_number);
	&ex('printuntil', 17, 17, $topic_number);
	exit(0);
}

&error_message ("Error", "This page ($me_number) does not allow for public posting of messages!") if $param !~ /Add/ && $newsubj == 0 && $FORM{'isitok'} ne "okiedokie";
&error_message ("Error", "This page does not allow for public creation of conversations!") if $param !~ /Create/ && $newsubj == 1;
&error_message ("Error", "Your username/password combination was invalid, or you are not allowed to post to this topic.") if $passwordline eq "invalid";

if ($double_post_protection_enabled) {
	open (LOG, "$admin_dir/log.txt");
	@LOG = <LOG>;
	close (LOG);
	$now = time;
	$mh = $newmessage; $mh = &JavaScript_prepare($mh); $mh = &escape($mh);
	foreach $line (reverse(@LOG)) {
		($index,$by,$time,$where,$addr,$host,$mt, $who2) = split(/;/, $line);
		last if ($now - $double_post_threshold) > $time;
		$mt =~ s/\s+$//;
		($by2) = ($by =~ m|^(.*):|);
		if ($by2 eq $username && substr($mh, 0, length($mt)) eq $mt) {
			if ($where eq "$topic_number/$me_number" || $newsubj == 1) {
				if ($FORM{'isitok'} ne 'okiedokie') {
					$url = "$message_url/$where.$ext";
					($ts) = &ex('extract_lastmodified', "$topic_number:$me_number");
					$url .= "?$ts" if !$noqm;
				} else {
					$url = "$cgiurlm$adminappend";
				}
				($head, $color, $lm, $sublist, $about, $about_src, $message, $message_src) = &get_page(split(/\//, $where));
				$flag = 0; $source = ""; @msgsrc = split(/\n/, $message_src);
				foreach $line2 (@msgsrc) {
					if ($line2 =~ m|<!-Source: $index-!>|) {
						$flag = 1;
					} elsif ($line2 =~ m|<!-/Source: (\d+)-!>|) {
						$flag = 0;
					} elsif ($flag == 1) {
						$source .= $line2;
					}
				}
				$source =~ s/\s+$//;
				if ($source eq &escape($message_hold)) {
					&error_message("$L{BPALREADYPOSTED}", "$L{BPALREADYPOSTEDDESC}<P><B><A HREF=\"$url\">$L{BPCLICKCONTINUE}</A></B><P>");
				}
			}
		}
	}
}

#---- Create a New Page? ----#

if ($newsubj == 1) {
	($num) = &ex('get_number', 1); 	$newnum = $num;
	$pagetitle = $newsubject;
	($dt) = &ex('get_date_time', "long"); 	$dt =~ s/\W//g;
	$me_number_hold = $me_number;
	&ex('new_file', $topic_number, $num, $me_number, $owner, $pagetitle);
	&ex('change_layout', $topic_number, $num, "MessagesAdd");
	$url = "$message_url/$topic_number/$num.$ext";
	$url .= "?$dt" if !$noqm;
	$newpage = $newsubject;
	$str = &JavaScript_prepare($newpage);
	$strg = "onMouseOver=\"return setStatus('$str')\"";
	($ts) = &ex('get_date_time', "short");
	$linex = "<!-Top: $num-!><LI><A HREF=\"$url\" $strg>$newpage</A> <FONT SIZE=\"-1\">";
	$linex .= "$ts</FONT></LI><P>\n";
	($head, $color, $lm, $sublist, $about, $about_src, $message, $message_src) = &get_page($topic_number, $me_number);
	if ($new_subtopics_go == 0) {
		&set_page($topic_number, $me_number, $head, $color, $lm, join("",$linex,$sublist), $about, $about_src, $message, $message_src);
	} else {
		&set_page($topic_number, $me_number, $head, $color, $lm, join("",$sublist,$linex), $about, $about_src, $message, $message_src);
	}
	&extract("//$topic_number/$num.$ext");
}
($postindex) = &ex('post_message',$topic_number,$me_number,$message_hold,$newmessage,$postby,$username,$groupname);
($dt) = &ex('get_date_time', "short");
($ts) = &ex('get_date_time',"long"); $ts =~ s/\W//g;
$newnum_number = $parent_number if $newnum_number == 0;
&ex('update_time', $topic_number, $newnum_number, $me_number, $ts, $dt);
$url = "$message_url/$topic_number/$me_number.$ext";
$url .= "?$ts" if !$noqm;

&email_notification($owner,$passwordline, $postby, $newmessage) if $email_notification == 1;

if ($newmessage !~ /<IMG SRC="$url_to_default_image"/) {
	&seturl("$url") if $FORM{'isitok'} ne "okiedokie";
	&seturl("$cgiurlm$adminappend") if $FORM{'isitok'} eq "okiedokie";
} else {
	$string = $newmessage;
	&header;
	($bgcolor, $text, $link, $vlink, $alink, $face, $size, $image) = &ex('extract_colorsonly', 1);
	&ex('printuntil', 1, 1, $topic_number, "$L{BPIMGUPLOADTITLE}");
	print "<FONT SIZE=+1><CENTER><B>$L{BPIMGUPLOADTITLE}</B></CENTER></FONT>\n<HR>\n";
	for ($i = 3; $i <= 9; $i += 2) {
		&ex('printuntil', $i, $i, $topic_number, "$L{BPIMGUPLOADTITLE}");
	}
	print "$L{BPIMGUPLOADINSTR}<P>\n";
	print "<HR>\n";
	print "<FORM ACTION=\"$script_url/board-image.$cgi_extension\" METHOD=POST ENCTYPE=\"multipart/form-data\">\n";
	for ($i = 11; $i <= 13; $i += 2) {
		&ex('printuntil', $i, $i, $topic_number);
	}
	$message = $string;
	$ctr = 0;
	while ($message =~ /<IMG SRC="$url_to_default_image" ALT="([^"]*)">/) {
		$matchstring = $1;
		$message = $';
		print "$L{BPPROVIDEFILE} <B>$matchstring</B>:<P>\n";
		++$ctr;
		print "<TABLE><TR><TD><INPUT TYPE=FILE NAME=\"Image$ctr\" SIZE=40></TD></TR></TABLE>\n";
		print "<HR>\n";
	}
	print "<INPUT TYPE=SUBMIT VALUE=\"$L{BPIMGUPLOADBUTTON}\">\n";
	print "<INPUT TYPE=HIDDEN NAME=name VALUE=\"$username_input\">\n";
	print "<INPUT TYPE=HIDDEN NAME=number VALUE=\"$FORM{'number'}\">\n";
	print "<INPUT TYPE=HIDDEN NAME=HTTP_REFERER VALUE=\"//$topic_number/$me_number.$ext\">\n";
	print "<INPUT TYPE=HIDDEN NAME=postindex VALUE=\"$postindex\">\n";
	print "<INPUT Type=hidden name=\"isitok\" value=\"okiedokie\">\n" if $FORM{'isitok'} eq "okiedokie";
	print "<HR>\n";
	print "</FORM>\n";
	if ($FORM{'isitok'} ne "okiedokie") {
		print "$L{BPIMGUPLOADCANCEL1} <A HREF=\"$url\">\n";
	} else {
		print "$L{BPIMGUPLOADCANCEL1} <A HREF=\"$cgiurlm$adminappend\">\n";
	}
	print "$L{BPIMGUPLOADCANCEL2}</A>. ";
	print "$L{BPIMGUPLOADCANCEL3}\n";
	print "<BR></FONT>\n";
	for ($i = 15; $i <= 17; $i += 2) {
		&ex('printuntil', $i, $i, $topic_number);
	}
	exit(0);
}

sub check_password_and_permissions {
	local ($username, $guess, $group) = @_;
	local ($user, $ok, @passwd_line, $line, $pass, $test_pass, @group, $groupline);
	local ($field1, $field2, @valid);
	undef (@users);
	open (PASSWD, "$admin_dir/users.txt") || &error_message("Verify Password Error", "Cannot open password file (users.txt) for reading!");
	@users = <PASSWD>;
	close (PASSWD);
	@valid = grep(/:$group(\n?)$/, @users);
	local ($public, $users, $moderators) = (0,0,0);
	$public = 1 if (grep(/^PUBLIC:/, @valid));
	$users = 1 if (grep(/^USERS:/, @valid));
	$moderators = 1 if (grep(/^MODERATORS:/, @valid));
	$disabled = 1 if (grep(/^DISABLE:/, @valid));
	open(PASSWD,"$admin_dir/passwd.txt") || &error_message("Verify Password Error", "Cannot open password file (passwd.txt) for reading!");
	@passwd_line = <PASSWD>;
	close(PASSWD);
	$ok = "";
	foreach $line (@passwd_line) {
		($user, $pass) = split(/:/, $line, 3);
		if ($user eq $username) {
			$test_pass = crypt($guess, $pass);
			$ok = "";
			$ok = "Yes" if $test_pass eq $pass;
			$ok = "No" if $guess eq "";
			$ok = "No" if $pass eq "";
			$ok = "Yes" if $COOKIE{'pass'} eq crypt($pass, "cookie");
			$ok = "Yes" if $COOKIE{'cpwd'} eq crypt($pass, "cookie");
			if ($COOKIE{'user'} ne $user && $ok eq "Yes") {
				&print_cookie_string($user);
			}
			if ($COOKIE{'cpwd'} ne crypt($pass, "cookie") && $ok eq "Yes") {
				&print_cookie_string("", length($FORM{'number'}), $pass);
			}
			if ($ok eq "Yes") {
				open (GROUP, "$admin_dir/groups.txt") || &error_message("Verify Password Error", "Cannot open groups file (groups.txt) for reading!");
				@group = <GROUP>;
				close (GROUP);
				($groupline) = grep (/^$group:/, @group);
				chop ($groupline) if $groupline =~ /\n$/;
				($field1, $field2) = split(/:/, $groupline);
				@valid = split(/,/, $field2);
				return $line if grep (/^$username$/, @valid);
				&error_message("$L{BPPOSTINGDISABLEDTITLE}", "$L{BPPOSTINGDISABLEDDESCR}") if $disabled;
				return $line if $moderators;
				return $line if $public;
			}
		}
	}
	open(PASSWD,"$admin_dir/users.txt") || &error_message("Verify Password Error", "Cannot open password file (users.txt) for reading!");
	@passwd_line = <PASSWD>;
	close(PASSWD);
	$ok = "";
	foreach $line (@passwd_line) {
		chop ($line) if $line =~ /\n/;
		($user, $pass, $foo, $foo, $foo, $foo, $foo, $group_test) = split(/:/, $line);
		if ($user eq $username) {
			$test_pass = crypt($guess, $pass);
			$ok = "";
			$ok = "Yes" if $test_pass eq $pass;
			$ok = "No" if $guess eq "";
			$ok = "No" if $pass eq "";
			$ok = "Yes" if $COOKIE{'cpwd'} eq crypt($pass, "cookie");
			if ($COOKIE{'user'} ne $user && $ok eq "Yes") {
				&print_cookie_string($user);
			}
			if ($COOKIE{'cpwd'} ne crypt($pass, "cookie") && $ok eq "Yes") {
				&print_cookie_string("", length($FORM{'number'}), $pass);
			}
			if ($ok eq "Yes") {
				&error_message("$L{BPPOSTINGDISABLEDTITLE}", "$L{BPPOSTINGDISABLEDDESCR}") if $disabled;
				return $line if $group_test eq $group;
				return $line if $users;
				return $line if $public;
			}
		}
	}
	&error_message("$L{BPPOSTINGDISABLEDTITLE}", "$L{BPPOSTINGDISABLEDDESCR}") if $disabled;
	return "public user" if $public;
	return "invalid";
}

sub send_email {
	local ($to, $postby, $message, $linein) = @_;
	$message .= " ";
	$to =~ s/[<>\|\\`#\$!'";]//g;
	$postby =~ s/<([^>]*)>//g;
	$message =~ s/<BR>/\n/g;
	$message =~ s/<IMG SRC="[^"]*" ALT="([^"]*)">/$1/g;
	$message =~ s/<LI>/\n\* /g;
	$message =~ s/<\/UL>/\n\n/g;
	$message =~ s/<([^>]*)>//g;
	$postby =~ s/&#(\d+);//g;
	$message =~ s/&#(\d+);/pack("c", $1)/ge;
	$message =~ s/&gt;/>/g;
	$message =~ s/&lt;/</g;
	$message =~ s/&quot;/"/g;
	$message =~ s/&amp;/&/g;
	$flag = 1;
	if (open (CONF, "$admin_dir/send_mail.conf")) {
		@conf = <CONF>;
		close (CONF);
		undef @res;
		foreach $line (@conf) {
			$line =~ s/#(.*)//;
			$line =~ s/^\s+//;
			$line =~ s/\s+$//;
			next if $line !~ /\S/;
			next if $line =~ /^#/;
			$line =~ s/\s+/ /g;
			push (@res, $line);
		}
		foreach $line (@res) {
			$line =~ m|^(\w+)\s?=\s?(.*)|; ($varname, $param) = ($1, $2);
			$P{$varname} = $param;
		}
		if ($P{'program_path'}) {
			$cmdline = " $P{'program_path'} ";
		} else {
			$flag = 0;
		}
		$opt = "";
		$cmdline .= " $P{'command_line'} ";
		foreach $prm ('from_name', 'to', 'subj') {
			$par = "$to" if $prm eq "to";
			$par = "$P{'from'}" if $prm eq "from_name";
			$par = "$P{'subject'}" if $prm eq "subj";
			if ($P{$prm} =~ m|<(.*)>|) {
				$key = $1; $opt .= "$key $par\n";
			} else {
				$key = $P{$prm};
				$par =~ s/["\\<>;\|]//g;
				$cmdline .= "-$key\"$par\" ";
			}
		}
		$opt .= "Reply-to: $replyto\n" if $replyto ne "";
	} else {
		$flag = 0;
	}
	if ($flag == 1) {
		if (open (MAIL, "| $cmdline")) {
			print MAIL $opt;
			print MAIL "\n";
		} else {
			open (MAIL, "| mail $to");
		}
	} elsif ($mailprog =~ m|/sendmail$|) {
		$contact =~ m|<A HREF="mailto:(.*)">|; $fr = $1;
		open (MAIL, "| $mailprog -t");
		print MAIL "To: $to\n";
		print MAIL "From: \"$titlej\" <$fr>\n";
		print MAIL "Subject: $L{BPEMAILSUBJECT}\n";
		print MAIL "Reply-to: $replyto\n" if $replyto ne "";
		print MAIL "\n";
	} elsif ($mailprog =~ m|/mail$|) {
		open (MAIL, "| $mailprog $to -s '$L{BPEMAILSUBJECT}'");
	} else {
		open (MAIL, "| mail $to");
	}
	
format MAIL =
~~^<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
$lineprint
.

	($date) = &ex('get_date_time', "long");
	$titlestr = "";
	$topic_temp = $topic_name;
	$titlestr = "$title: $topic_temp";
	foreach $key (sort {$a <=> $b} keys(%level_number)) {
		$topic_temp = $level_name{$key};
		$titlestr .= ": $topic_temp";
	}
	$titlestr =~ s/<IMG SRC="[^"]*" ALT="([^"]*)">/$1/g;
	$titlestr =~ s/<([^>]*)>//g;
	$titlestr =~ s/&#(\d+);/pack("c", $1)/ge;
	$titlestr =~ s/&gt;/>/g;
	$titlestr =~ s/&lt;/</g;
	$titlestr =~ s/&quot;/"/g;
	$titlestr =~ s/&amp;/&/g;
	&mail_out($titlestr);
	print MAIL "\n\n";
	$pb = $L{POSTBY};
	($datetime) = &ex('get_date_time', "long");
	$pb =~ s/\%name/$postby/g;
	$pb =~ s/\%date/$datetime/g;
	$pb = &JavaScript_prepare($pb);
	print MAIL "$pb\n\n";
	&mail_out($message);
	print MAIL "\n";
	($user, $pass, $address, $full, $prof, $send) = split(/:/, $linein);
	if ($reply_by_email) {
		$L{BPREPLYBYEMAILMESSAGE} =~ s/\\/\n/g;
		print MAIL "$L{BPREPLYBYEMAILMESSAGE}";
		print MAIL " ***||$user||", crypt($pass, "cookie"), "||$topic_number||$me_number||***\n";
		print MAIL " *********************************************************\n";
		print MAIL "$script_url/show.$cgi_extension?$topic_number/$me_number\n\n";
	} else {
		$L{BPEMAILFOOTER} =~ s/\\/\n/g;
		print MAIL "$L{BPEMAILFOOTER}", " [\u$user]\n\n";
		print MAIL "$script_url/show.$cgi_extension?$topic_number/$me_number\n\n";
	}
	close (MAIL);
}

sub mail_out {
	local ($variable) = @_;
	local (@chars, $line);
	@chars = split(/\n/, $variable);
	foreach $line (@chars) {
		$lineprint = $line;
		write (MAIL) if $line ne "\n";
	}
}

sub email_notification {
	local ($group, $linein, $postby, $message) = @_;
	$group_hold = $group;
	($user) = split(/:/, $linein);
	$theuser = $user;
	if ($user ne "public user") {
		($user, $pass, $address, $full, $prof, $send) = split(/:/, $linein);
		if ($send == 1 || $send == 3) {
			if ($address =~ /^([\w\.\-\+]+)\@([\w\.\-\+]+)$/) {
				&send_email($address, $postby, $message, $linein);
			}
		}
	}
	open (PASSWD, "$admin_dir/passwd.txt"); @passwd = <PASSWD>; close (PASSWD);
	open (GROUP, "$admin_dir/groups.txt"); @group = <GROUP>; close (GROUP);
	($thegroup) = grep(/^$group:/, @group);
	($foo, $thegroup) = split(/:/, $thegroup);
	chop ($thegroup) if $thegroup =~ /\n$/;
	@members = split(/,/, $thegroup);
	foreach $member (@members) {
		($theline) = grep(/^$member:/, @passwd);
		($user, $pass, $address, $fullname, $profile, $want) = split(/:/, $theline);
		if ($want >= 2 && $theline ne $linein) {
			if ($address =~ /^([\w\.\-\+]+)\@([\w\.\-\+]+)$/) {
				&send_email($address, $postby, "$message", $theline);
			}
		}
	}
	open (PASSWD, "$admin_dir/users.txt"); @passwd = <PASSWD>; close (PASSWD);
	@members = grep (/:$group_hold(\n?)$/, @passwd);
	foreach $member (@members) {
		$theline = $member;
		chop ($theline) if $theline =~ /\n$/;
		($user, $pass, $address, $fullname, $profile, $want, $other) = split(/:/, $theline);
		if (($want == 2 || $want == 3) && ($theline ne $linein)) {
			if ($address =~ /^([\w\.\-\+]+)\@([\w\.\-\+]+)$/) {
				&send_email($address, "$postby", $message, $theline);
			}
		}
	}
}