3296l1.orig100664 1061 330 2004 6636332371 11123 0ustar mlrljedit# Listing 1: search-form.html Search through the postings

Search through the postings

This form allows you to search through the posting to the ATF forum. Searches are case-insensitive, meaning that "ABC" is the same as "abc". This search only looks through the messages associated with each thread.

Search for:

Literal search Use regular expressions

[Post a message] [View all threads] [Search] [Add a new thread] [ATF home]

3296l2.orig100664 1061 330 6065 6636332375 11143 0ustar mlrljedit# Listing 2: search.pl #!/usr/bin/perl -wT # search.pl, which allows people to search through postings use strict; use diagnostics; use CGI; use CGI::Carp qw(fatalsToBrowser); use DBI; # This call to "use lib" should reflect the location of # ATFConstants.pm, which defines $database, $server, $port, $username, # and $password use lib qw(/home/reuven/www/cgi-bin); use ATFConstants; my $message_id = ""; my $thread_id = ""; my $subject = ""; my $author = ""; my $thread_name = ""; # Remove buffering $| = 1; # ------------------------------------------------------------ # Create an instance of CGI my $query = new CGI; my $term = $query->param("term"); my $regexp = $query->param("regexp"); # Send a MIME header print $query->header("text/html"); print $query->start_html(-title => "Search results", -bgcolor => "#FFFFFF"); print "

Search results

\n"; # ------------------------------------------------------------ # Connect to the database my $dbh = DBI->connect("DBI:mysql:$database:$server:$port",$username,$password); die "DBI error from connect: \"$DBI::errstr\"" unless $dbh; # ------------------------------------------------------------ # Get information about the thread my $sql = "SELECT M.id, M.thread, M.subject, M.author, T.subject "; $sql .= "FROM ATFMessages M, ATFThreads T "; # Should we treat this as a regular expression? if ($regexp eq "yes") { $sql .= "WHERE M.text REGEXP \"$term\" "; } # Or should we treat this as a literal phrase? else { # Remove SQL regexp characters $term =~ s|%|\\\%|g; $term =~ s|_|\\\_|g; $sql .= "WHERE M.text LIKE \"%$term%\" "; } $sql .= "AND M.thread = T.id "; $sql .= "ORDER BY M.date desc"; # Send the query my $sth = $dbh->prepare($sql); die "DBI error with prepare: \"$sth->errstr\"" unless $sth; # Execute the query $sth->execute; die "DBI error with execute: \"$sth->errstr\"" unless $sth; # We should only have received a single row. Print it out. if ($sth->rows) { print "\n"; } else { print "

No matches.

\n"; } # ------------------------------------------------------------ # Menu bar print "

\n"; # Send the user to the posting form print "[Post a message]"; print "\n"; # Send the user to the thread list print "[View all threads]\n"; # Send the user to the search print "[Search]\n"; # Allow the user to create a new thread print "[Add a new thread]\n"; # Give a plug for the ATF home page print "[ATF home]\n"; print "

\n"; 3296l3.orig100664 1061 330 10157 6636332404 11152 0ustar mlrljedit# Listing 3: zap-thread.pl #!/usr/bin/perl -wT # Time-stamp: <1998-12-08 09:58:14 reuven> # zap-thread.pl, which allows for the deletion of an entire thread use strict; use diagnostics; use CGI; use CGI::Carp qw(fatalsToBrowser); use DBI; use lib qw(/home/reuven/www/cgi-bin); use ATFConstants; # Remove buffering $| = 1; # ------------------------------------------------------------ # Create an instance of CGI my $query = new CGI; # Send a MIME header print $query->header("text/html"); print $query->start_html(-title => "Zap a thread", -bgcolor => "#FFFFFF"); # Connect to the database my $dbh = DBI->connect("DBI:mysql:$database:$server:$port",$username,$password); die "DBI error from connect: ", $DBI::errstr unless $dbh; # ------------------------------------------------------------ # If we were invoked with GET, print a list of threads with # checkboxes if ($query->request_method eq "GET") { print "

Zap threads

\n"; print "

Check the box next to any thread you wish to delete. \n"; print "Then enter the password. There is no undelete."; print "You have been warned.

\n"; print "
\n"; my $sql = "SELECT id,subject FROM ATFThreads ORDER BY subject"; # Send the query my $sth = $dbh->prepare($sql); die "DBI error with prepare:", $sth->errstr unless $sth; # Execute the query my $result = $sth->execute; die "DBI error with execute:", $sth->errstr unless $result; # If we received threads from the SELECT, print them out if ($sth->rows) { # Iterate through thread IDs and names while (my @row = $sth->fetchrow) { print " $row[1]\n
"; } # Finish that database call $sth->finish; } else { print "

No threads to display<\#150><\#150>so there's nothing to zap!

\n"; } print '

Password: ', "\n

"; print '

', "\n

"; print "
\n"; } # If we are invoked with POST, check the password and delete # the appropriate threads and messages elsif ($query->request_method eq "POST") { # Check the password if ($query->param("password") eq $zap_password) { my @elements = $query->param; # Iterate through each thread ID marked for deletion foreach my $element (@elements) { # Ignore any elements we don't want next unless ($element =~ m/^thread-(\d+)$/); # Grab the thread ID my $thread_id = $1; # Delete the thread from ATFThreads my $sql = "DELETE FROM ATFThreads WHERE id = $thread_id "; warn "SQL: \"$sql\"\n"; my $sth = $dbh->prepare ($sql); my $result = $sth->execute; die("Error deleting from ATFThreads: " . $sth->errstr) unless $result; print "

Deleted the thread.

\n"; # Delete messages for this thread from ATFMessages $sql = "DELETE FROM ATFMessages WHERE thread = $thread_id "; warn "SQL: \"$sql\"\n"; $sth = $dbh->prepare ($sql); $result = $sth->execute; die("Error deleting from ATFMessages: " . $sth->errstr) unless $result; print "

Deleted messages in the thread.

\n"; } } else { print "

Sorry, but you entered the wrong password.

\n"; } } # If the request method is neither GET nor POST, issue an error else { print "

Sorry, but we only recognize GET and POST.

\n"; } # ------------------------------------------------------------ # Menu bar print "

\n"; # Send the user to the posting form print "[Post a message]"; print "\n"; # Send the user to the thread list print "[View all threads]\n"; # Send the user to the search print "[Search]\n"; # Allow the user to create a new thread print "[Add a new thread]\n"; # Give a plug for the ATF home page print "[ATF home]\n"; print "

\n"; # Disconnect from the database $dbh->disconnect; 3296l4.orig100664 1061 330 604 6636332412 11106 0ustar mlrljedit# Listing 4: ATFConstants.pm #!/usr/bin/perl -wT # Time-stamp: <1998-12-07 19:45:05 reuven> use strict; use diagnostics; # Declare some commonly used variables use vars qw($database $server $port $username $password $zap_password); $database = "reuven"; $server = "localhost"; $port = "3306"; $username = "reuven"; $password = "SETME"; $zap_password = "flarg"; # Exit normally; 1;