#!/usr/bin/perl

use strict;
use CGI::Pretty qw/:standard :html3 *table/;
use DBI;

require "functions.pl";
our ($dbh,$owneremail,$ownerdesc,$sendmail);
my ($action,$sth,$rc,$query);
my (@buff,$username,$surname,$name,$email,$in,@content);


$action=(param('action'))?param('action'):"";

if($action eq "Recover") {
$username=(param('username'))?param('username'):"";
$surname=(param('surname'))?param('surname'):"";
$name=(param('name'))?param('name'):"";
$email=(param('email'))?param('email'):"";
my $a=quotemeta($username);
my $b=quotemeta($surname);
my $c=quotemeta($name);
my $d=quotemeta($email);
db_connect();
		$query="SELECT username,password,email,prn FROM basic_auth WHERE
		username='$a' AND surname='$b' AND name='$c'
		AND email='$d'";
                $sth = $dbh->prepare($query);
                if (!$sth) {
                  print_error("[DBI]: Prepare Error Occured!",$DBI::errstr);
                  db_disconnect();
                  exit(1);
                }
                $rc=$sth->execute;
                if (!$rc) {
                  print_error("[DBI]: Execute Error Occured!",$DBI::errstr);
                  $sth->finish();
                  db_disconnect();
                  exit(1);
                }
		@buff=$sth->fetchrow_array;
		if (!defined(@buff) || $buff[0] eq ""){
			print_nosuch();
		} else {
		open(DAT,"text/recover.txt");
		@content=<DAT>;
		close(DAT);
		open (MAIL,"|$sendmail");
		print MAIL "From: $ownerdesc <$owneremail>\n";
		print MAIL "To: $surname $name <$buff[2]>\n";
		print MAIL "Subject: [BizIncUSA] Password Recovery.\n\n";
		   foreach $in (@content) {
			$in =~ s/var\_firstname/$surname/g;
			$in =~ s/var\_lastname/$name/g;
			$in =~ s/var\_username/$buff[0]/g;
			$in =~ s/var\_password/$buff[1]/g;
			$in =~ s/var\_prn/$buff[3]/g;
			print MAIL "$in";
		   }
		close(MAIL);
		print_done();
		}
$sth->finish();
db_disconnect();

}
else {
	print_header('BizInc USA - Recover Password');
	print_form();
	print_footer();
}



sub print_form{
print<<"HTML";
  <script language="JavaScript">
        function validate_form(form){
                if(form.username.value.length<1){
                        alert("Please enter your username!");
                        return false
                }
                if(form.surname.value.length<1){
                        alert("Please enter your first name!");
                        return false
                }
                if(form.name.value.length<1){
                        alert("Please enter your last name!");
                        return false
                }
                if(form.email.value.length<1){
                        alert("Please enter your email address!");
                        return false
                }
        }
  </script>
   <br><br>
   <form name="recover" action="recover.cgi" method="POST" OnSubmit="return validate_form(document.recover)">
   <table align="center" border="0" bgcolor="#FFFFFF" cellspacing="0" cellpadding="4">
     <tr>
	<td bgcolor="#DFE8E8" align="left" valign="center">
	  <table width="100%" align="center" bgcolor="#003366" border="0" cellspacing="0" cellpadding="1">
	    <tr>
	       <td bgcolor="#003366">
		 <table align="center" width="100%" cellspacing="1" cellpadding="4" bgcolor="#FFFFFF">
		   <tr>
		      <td align="left" valign="center" bgcolor="#E9EBEF" colspan="2">
			<small><b>&nbsp;Password Recovery&nbsp;</b></small>
		      </td>
		   </tr>
		   <tr>
		      <td align="right" valign="center" bgcolor="#FFFFFF">
			<small><b>&nbsp;Username:&nbsp;</b></small>
		      </td>
		      <td align="left" valign="center" bgcolor="#FFFFFF">
			&nbsp;<input type="text" size="20" maxlength="32" value="" name="username"></input>&nbsp;
		      </td>
		   </tr>
		   <tr>
		      <td align="right" valign="center" bgcolor="#FFFFFF">
			<small><b>&nbsp;First Name:&nbsp;</b></small>
		      </td>
		      <td align="left" valign="center" bgcolor="#FFFFFF">
			&nbsp;<input type="text" size="20" maxlength="32" value="" name="surname"></input>&nbsp;
		      </td>
		   </tr>
		   <tr>
		      <td align="right" valign="center" bgcolor="#FFFFFF">
			<small><b>&nbsp;Last Name:&nbsp;</b></small>
		      </td>
		      <td align="left" valign="center" bgcolor="#FFFFFF">
			&nbsp;<input type="text" size="20" maxlength="32" value="" name="name"></input>&nbsp;
		      </td>
		   </tr>
		   <tr>
		      <td align="right" valign="center" bgcolor="#FFFFFF">
			<small><b>&nbsp;Email:&nbsp;</b></small>
		      </td>
		      <td align="left" valign="center" bgcolor="#FFFFFF">
			&nbsp;<input type="text" size="20" maxlength="32" value="" name="email"></input>&nbsp;
		      </td>
		   </tr>
                   <tr>
                      <td bgcolor="#FFFFFF" align="center" valign="center" colspan="2">
                         &nbsp;<input type="submit" value="Recover" name="action"></input>&nbsp;
                      </td>
                   </tr>
		 </table>
	       </td>
	    </tr>
	  </table>
	</td>
     </tr>
   </table>
   </form>
HTML
}
sub print_nosuch {
print_header('BizInc USA - Password Recovery Error');
print_form();
print "<center><small><b><font color=\"#993366\">I'm sorry but i didn't find any match!</font></b></small></center>\n";
print "<br><center><small><b>Click <a href=\"http://www.bizinc.usa\" class=\"simple\">here</a> to go back!</b></small></center>\n";
print_footer();
}
sub print_done{
 print_header('BizInc USA - Password Sent');
 print "<br><br><center><b><font color=\"#003366\">Your password was e-mailed to you.</font></b></center>\n";
 print_footer();
}