3193l1100664 1100 330 10300 6614131731 10155 0ustar amyljedit#!/usr/bin/perl -wT # Listing 1: add-thread.pl use strict; use diagnostics; use CGI; use CGI::Carp qw(fatalsToBrowser); use DBI; # This is add-thread.pl, which allows people to add a thread. my $database = "atf"; my $server = "localhost"; my $port = "3306"; my $username = "reuven"; my $password = "SETME"; my @values = qw(subject text name email); my %values = (); # Remove buffering $| = 1; # ------------------------------------------------------------ # Create an instance of CGI my $query = new CGI; # ------------------------------------------------------------ # If the user tried to invoke this with a non-POST, give an error message if ($query->request_method ne "POST") { print $query->start_html(-title => "Invalid invocation", -bgcolor => "#FFFFFF"); print "

Invalid invocation

\n"; print "

This program should only be invoked from an HTML form. "; print "Try here.

\n"; print $query->end_html; exit; } # Get the realname and username, and stick them in cookies my $namecookie = $query->cookie(-name => "name", -value => $query->param("name"), -expires => "+1y"); my $emailcookie = $query->cookie(-name => "email", -value => $query->param("email"), -expires => "+1y"); # Send a MIME header, with the cookies print $query->header(-type => "text/html", -cookie => [$namecookie, $emailcookie]); # ------------------------------------------------------------ # Connect to the database my $dbh = DBI->connect("DBI:mysql:$database:$server:$port",$username,$password); die "DBI error from connect:", $DBI::errstr unless $dbh; # Get the form parameters, and quote them foreach my $element (@values) { $values{$element} = $dbh->quote($query->param($element)); } # Check that we received a subject if ($values{"subject"} !~ /\w/) { print $query->start_html(-title => "Try again", -bgcolor => "#FFFFFF"); print "

Try again!

\n"; print "

You need to enter a subject to create a thread. Press "; print "the \"back\" button in your Web browser, and try again.

\n"; print "

subject = \"$values{subject}\"

\n"; print $query->end_html; exit; } # ------------------------------------------------------------ # Perform some processing on $values{text}: Remove HTML tags, # and insert paragraphs instead of blank lines $values{text} =~ s/<.*?>//sg; $values{text} =~ s/\r\n/\n/g; $values{text} =~ s/\r/\n/g; $values{text} =~ s|\n\n|

\n<\P>|gi; # Create the query my $sql = "INSERT INTO ATFThreads "; $sql .= " (subject, text, author, email, date) "; $sql .= "VALUES "; $sql .= " ($values{subject},$values{text},$values{name},$values{email},NOW()) "; # Send the query my $sth = $dbh->prepare($sql); die "DBI error with prepare: ", $sth->errstr unless $sth; # Execute the query my $result = $sth->execute; # If execute succeeded, print a success message if ($result) { print $query->start_html(-title => "Thread added!", -bgcolor => "#FFFFFF"); print "

Thread added

\n"; print "

The new thread has been created.

\n"; # ------------------------------------------------------------ # Menu bar print "

\n"; # Send the user to the posting form print "{"insertid"}, "\">[View this thread]"; print "\n"; # Send the user to the thread list print "[View all threads]\n"; # Send the user to the search print "[Search]\n"; # Allow the user to create a new thread print "[Add a new thread]\n"; # Give a plug for the ATF home page print "[ATF home]\n"; print "

\n"; print $query->end_html; } # If the execute did not succeed, print an appropriate error message else { print $query->start_html(-title => "Thread not added", -bgcolor => "#FFFFFF"); print "

Thread not added

\n"; print "

The new thread has not been created.

\n"; print "

The error message \"$DBI::errstr\"

\n"; print $query->end_html; } # Disconnect from the database $dbh->disconnect; 3193l2100664 1100 330 4323 6614132020 10136 0ustar amyljedit#!/usr/bin/perl -wT # Listing 2: list-threads.pl # This is list-threads.pl, which lists the current threads use strict; use diagnostics; use CGI; use CGI::Carp qw(fatalsToBrowser); use DBI; my $database = "atf"; my $server = "localhost"; my $port = "3306"; my $username = "reuven"; my $password = "SETME"; # Remove buffering $| = 1; # ------------------------------------------------------------ # Create an instance of CGI my $query = new CGI; # Send a MIME header print $query->header("text/html"); print $query->start_html(-title => "Select a thread", -bgcolor => "#FFFFFF"); print "

Select a thread

\n"; print "

Clicking on a thread's subject will display the messages "; print "in that particular discussion.

\n"; # ------------------------------------------------------------ # Connect to the database my $dbh = DBI->connect("DBI:mysql:$database:$server:$port",$username,$password); die "DBI error from connect: ", $DBI::errstr unless $dbh; my $sql = "SELECT id,subject FROM ATFThreads ORDER BY subject"; # Send the query my $sth = $dbh->prepare($sql); die "DBI error with prepare:", $sth->errstr unless $sth; # Execute the query my $result = $sth->execute; die "DBI error with execute:", $sth->errstr unless $result; # If we received threads from the SELECT, print them out if ($sth->rows) { print "\n"; # Finish that database call $sth->finish; } else { print "

No threads to display!

\n"; } # ------------------------------------------------------------ # Menu bar print "

\n"; # Send the user to the posting form print "[Post a message]"; print "\n"; # Send the user to the search print "[Search]\n"; # Allow the user to create a new thread print "[Add a new thread]\n"; # Give a plug for the ATF home page print "[ATF home]\n"; print "

\n"; print $query->end_html; # Disconnect, even though it isn't really necessary $dbh->disconnect; 3193l3100664 1100 330 6700 6614132116 10146 0ustar amyljedit#!/usr/bin/perl -wT # Listing 3: view-thread.pl # view-thread.pl, which allows people to view messages in a thread. use strict; use diagnostics; use CGI; use CGI::Carp qw(fatalsToBrowser); use DBI; my $database = "atf"; my $server = "localhost"; my $port = "3306"; my $username = "reuven"; my $password = "SETME"; # Remove buffering $| = 1; # ------------------------------------------------------------ # Create an instance of CGI my $query = new CGI; my $thread_id = $query->param("keywords"); # Send a MIME header print $query->header("text/html"); print $query->start_html(-title => "View a thread", -bgcolor => "#FFFFFF"); # ------------------------------------------------------------ # Connect to the database my $dbh = DBI->connect("DBI:mysql:$database:$server:$port",$username,$password); die "DBI error from connect: \"$DBI::errstr\"" unless $dbh; # ------------------------------------------------------------ # Get information about the thread my $sql = "SELECT author,email,subject,text FROM ATFThreads WHERE id = $thread_id"; my $author = ""; my $email = ""; my $subject = ""; my $text = ""; # Send the query my $sth = $dbh->prepare($sql); die "DBI error with prepare: \"$sth->errstr\"" unless $sth; # Execute the query my $result = $sth->execute; die "DBI error with execute: \"$sth->errstr\"" unless $result; # We should only have received a single row. Print it out. if ($sth->rows) { # Iterate through thread IDs and names while (my @row = $sth->fetchrow) { ($author, $email, $subject, $text) = @row; } } else { print "

Error retrieving thread information! Aborting.

\n"; exit; } print "

Thread: $subject

\n"; print "

$text

\n"; print "

-- $author

\n"; print "
\n"; # ------------------------------------------------------------ $sql = "SELECT id, DATE_FORMAT(date, \"%W, %d %b %Y\"), "; $sql .= "DATE_FORMAT(date, \"%h:%i %p\"), "; $sql .= "author, email, subject, text FROM ATFMessages "; $sql .= "WHERE thread = $thread_id ORDER BY date desc"; # Send the query $sth = $dbh->prepare($sql); die "DBI error with prepare: \"$sth->errstr\"" unless $sth; # Execute the query $sth->execute; die "DBI error with execute: \"$sth->errstr\"" unless $sth; # If we received threads from the SELECT, print them out if ($sth->rows) { # Iterate through thread IDs and names while (my @row = $sth->fetchrow) { my ($id, $date, $time, $author, $email, $subject, $text) = @row; print "$subject, "; print "by $author on $date at $time

\n"; print "
$text
\n\n"; } print "\n"; # Finish that database call $sth->finish; } else { print "

There are currently no messages here.

\n"; } # ------------------------------------------------------------ # Menu bar print "

\n"; # Send the user to the posting form print "[Post a message]"; print "\n"; # Send the user to the thread list print "[View all threads]\n"; # Send the user to the search print "[Search]\n"; # Allow the user to create a new thread print "[Add a new thread]\n"; # Give a plug for the ATF home page print "[ATF home]\n"; print "

\n"; # Disconnect from the database $dbh->disconnect;