#!/usr/bin/perl

use strict;
use CGI qw/:standard :html3 *table/;
use DBI;

require "functions.pl";
our ($dbh,@states,@cards,$owneremail,$ownerdesc,$url_base,$sendmail);
my ($i,$j,$username,$action,$rndstr,$id,$prn);
my ($sth,$rc,$query);
my ($ch_surname,$ch_middle,$ch_name,$cc1,$cc2,$cc_type,$expire_mon,$expire_year,$address,$city,$zip,$state,$tel,$cvvs);
my (@buff,@content);
my ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst);

# # # # # # # # # # # # # # # # # # # 
# Starting the job.
# # # # # # # # # # # # # # # # # # #

($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time);
$year=1900+$year;

# Read basic param

$action=(param('action'))?param('action'):"";

if ( $action eq "go") {
# read required params
$username=(param('username'))?param('username'):"";
$rndstr=(param('rndstr'))?param('rndstr'):"";

if ($rndstr eq "" || $username eq ""){
	print_error('Invalid arguments. No action will be taken');
	exit(13);
}

# Checking if this is an valid user.

db_connect();
$query="SELECT id,salutation,surname,middle,name,validated FROM basic_auth WHERE username='$username' AND random_string='$rndstr'";
$sth = $dbh->prepare($query);
if (!$sth) {
        print_error("[DBI]: Prepare Error Occured!",$DBI::errstr);
        db_disconnect();
        exit(1);
}

$rc=$sth->execute;
if (!$rc) {
        print_error("[DBI]: Execute Error Occured!",$DBI::errstr);
        $sth->finish();
        db_disconnect();
        exit(1);
}

@buff=$sth->fetchrow_array;
if (!defined(@buff) || $buff[0] eq ""){
	print_error("Your authentication data don't match. Maybe u didn't copy&paste well the link we provided you");
	$sth->finish();
	db_disconnect();
	exit(113);
}
else {
	if ($buff[5] eq "Y"){
		print_error('This account was already validated!');
		$sth->finish();
		db_disconnect();
		exit(113);
	}
}
print_header("Welcome $buff[1] $buff[2] $buff[3]. $buff[4] - BizInc USA");
print_step_two($buff[0],$rndstr,'','','','','','','','','','','','','','',$buff[1],$buff[2],$buff[3],$buff[4]);
print_footer();


$sth->finish();
db_disconnect();

}

elsif ($action eq "Validate"){
# check params
$id=(param('id'))?param('id'):"";
$rndstr=(param('rndstr'))?param('rndstr'):"";
$ch_surname=(param('ch_surname'))?param('ch_surname'):"";
$ch_middle=(param('ch_middle'))?param('ch_middle'):"";
$ch_name=(param('ch_name'))?param('ch_name'):"";
$cc1=(param('cc1'))?param('cc1'):"";
$cc2=(param('cc2'))?param('cc2'):"";
$cc_type=(param('cc_type'))?param('cc_type'):"";
$expire_mon=(param('expire_mon'))?param('expire_mon'):"";
$expire_year=(param('expire_year'))?param('expire_year'):"";
$address=(param('address'))?param('address'):"";
$city=(param('city'))?param('city'):"";
$zip=(param('zip'))?param('zip'):"";
$state=(param('state'))?param('state'):"";
$tel=(param('tel'))?param('tel'):"";
$cvvs=(param('cvvs'))?param('cvvs'):"";

# Checking the user :D
  if($id eq "" || $rndstr eq ""){
	print_error("One of the basic arguments are missing!");
	exit(110);
  }

db_connect();
$query="SELECT id,salutation,surname,middle,name,email,username FROM basic_auth WHERE id='$id' AND random_string='$rndstr'";
$sth = $dbh->prepare($query);
if (!$sth) {
        print_error("[DBI]: Prepare Error Occured!",$DBI::errstr);
        db_disconnect();
        exit(1);
}

$rc=$sth->execute;
if (!$rc) {
        print_error("[DBI]: Execute Error Occured!",$DBI::errstr);
        $sth->finish();
        db_disconnect();
        exit(1);
}

@buff=$sth->fetchrow_array;
if (!defined(@buff) || $buff[0] eq ""){
	print_error("Your authentication data is invalid!");
	$sth->finish();
	db_disconnect();
	exit(113);
}
# Checking params. (this will be a long typing job :( )

  if ($ch_surname eq ""){
	print_header("BizInc USA - Account validation error.");
	print_step_two($id,$rndstr,'',$ch_middle,$ch_name,$cc1,$cc2,$cc_type,$expire_mon,$expire_year,$address,$city,$zip,$state,$tel,$cvvs,$buff[1],$buff[2],$buff[3],$buff[4]);
	print "<center><small><b><font color=\"#993366\">Please enter card holder first name.</font></b></small></center>\n";
        print_footer();
	$sth->finish();
	db_disconnect();
        exit(1);
  }
  if ($ch_middle eq ""){
        print_header("BizInc USA - Account validation error.");
        print_step_two($id,$rndstr,$ch_surname,'',$ch_name,$cc1,$cc2,$cc_type,$expire_mon,$expire_year,$address,$city,$zip,$state,$tel,$cvvs,$buff[1],$buff[2],$buff[3],$buff[4]);
        print "<center><small><b><font color=\"#993366\">Please enter card holder middle initial.</font></b></small></center>\n";
        print_footer();
	$sth->finish();
	db_disconnect();
        exit(1);
  }
  if ($ch_name eq ""){
        print_header("BizInc USA - Account validation error.");
        print_step_two($id,$rndstr,$ch_surname,$ch_middle,'',$cc1,$cc2,$cc_type,$expire_mon,$expire_year,$address,$city,$zip,$state,$tel,$cvvs,$buff[1],$buff[2],$buff[3],$buff[4]);
        print "<center><small><b><font color=\"#993366\">Please enter card holder last name.</font></b></small></center>\n";
        print_footer();
	$sth->finish();
	db_disconnect();
        exit(1);
  }
  if ($cc1 eq "" || $cc2 eq ""){
        print_header("BizInc USA - Account validation error.");
        print_step_two($id,$rndstr,$ch_surname,$ch_middle,$ch_name,'','',$cc_type,$expire_mon,$expire_year,$address,$city,$zip,$state,$tel,$cvvs,$buff[1],$buff[2],$buff[3],$buff[4]);
        print "<center><small><b><font color=\"#993366\">Please enter credit card number.</font></b></small></center>\n";
        print_footer();
	$sth->finish();
	db_disconnect();
        exit(1);
  }
  if ($cc_type eq ""){
        print_header("BizInc USA - Account validation error.");
        print_step_two($id,$rndstr,$ch_surname,$ch_middle,$ch_name,$cc1,$cc2,'',$expire_mon,$expire_year,$address,$city,$zip,$state,$tel,$cvvs,$buff[1],$buff[2],$buff[3],$buff[4]);
        print "<center><small><b><font color=\"#993366\">Please select credit card type.</font></b></small></center>\n";
        print_footer();
	$sth->finish();
	db_disconnect();
        exit(1);
  }
  if ($expire_mon eq "" || $expire_year eq ""){
        print_header("BizInc USA - Account validation error.");
        print_step_two($id,$rndstr,$ch_surname,$ch_middle,$ch_name,$cc1,$cc2,$cc_type,'','',$address,$city,$zip,$state,$tel,$cvvs,$buff[1],$buff[2],$buff[3],$buff[4]);
        print "<center><small><b><font color=\"#993366\">Please select credit card expiration date.</font></b></small></center>\n";
        print_footer();
	$sth->finish();
	db_disconnect();
        exit(1);
  }
  if ($address eq ""){
        print_header("BizInc USA - Account validation error.");
        print_step_two($id,$rndstr,$ch_surname,$ch_middle,$ch_name,$cc1,$cc2,$cc_type,$expire_mon,$expire_year,'',$city,$zip,$state,$tel,$cvvs,$buff[1],$buff[2],$buff[3],$buff[4]);
        print "<center><small><b><font color=\"#993366\">Please enter statement address.</font></b></small></center>\n";
        print_footer();
	$sth->finish();
	db_disconnect();
        exit(1);
  }
  if ($city eq ""){
        print_header("BizInc USA - Account validation error.");
        print_step_two($id,$rndstr,$ch_surname,$ch_middle,$ch_name,$cc1,$cc2,$cc_type,$expire_mon,$expire_year,$address,'',$zip,$state,$tel,$cvvs,$buff[1],$buff[2],$buff[3],$buff[4]);
        print "<center><small><b><font color=\"#993366\">Please enter statement city.</font></b></small></center>\n";
        print_footer();
	$sth->finish();
	db_disconnect();
        exit(1);
  }
  if ($zip eq ""){
        print_header("BizInc USA - Account validation error.");
        print_step_two($id,$rndstr,$ch_surname,$ch_middle,$ch_name,$cc1,$cc2,$cc_type,$expire_mon,$expire_year,$address,$city,'',$state,$tel,$cvvs,$buff[1],$buff[2],$buff[3],$buff[4]);
        print "<center><small><b><font color=\"#993366\">Please enter statement zip.</font></b></small></center>\n";
        print_footer();
	$sth->finish();
	db_disconnect();
        exit(1);
  }
  if ($state eq ""){
        print_header("BizInc USA - Account validation error.");
        print_step_two($id,$rndstr,$ch_surname,$ch_middle,$ch_name,$cc1,$cc2,$cc_type,$expire_mon,$expire_year,$address,$city,$zip,'',$tel,$cvvs,$buff[1],$buff[2],$buff[3],$buff[4]);
        print "<center><small><b><font color=\"#993366\">Please select statement state.</font></b></small></center>\n";
        print_footer();
	$sth->finish();
	db_disconnect();
        exit(1);
  }
  if ($tel eq ""){
        print_header("BizInc USA - Account validation error.");
        print_step_two($id,$rndstr,$ch_surname,$ch_middle,$ch_name,$cc1,$cc2,$cc_type,$expire_mon,$expire_year,$address,$city,$zip,$state,'',$cvvs,$buff[1],$buff[2],$buff[3],$buff[4]);
        print "<center><small><b><font color=\"#993366\">Please enter card holder tel#.</font></b></small></center>\n";
        print_footer();
	$sth->finish();
	db_disconnect();
        exit(1);
  }
  if ($cvvs eq ""){
        print_header("BizInc USA - Account validation error.");
        print_step_two($id,$rndstr,$ch_surname,$ch_middle,$ch_name,$cc1,$cc2,$cc_type,$expire_mon,$expire_year,$address,$city,$zip,$state,$tel,'',$buff[1],$buff[2],$buff[3],$buff[4]);
        print "<center><small><b><font color=\"#993366\">Please enter CVVS code.</font></b></small></center>\n";
        print_footer();
	$sth->finish();
	db_disconnect();
        exit(1);
  }

# inserting user billing data.
my ($a,$b,$c,$d,$e,$f,$g,$h,$k,$l);
$a=quotemeta($ch_surname);
$b=quotemeta($ch_middle);
$c=quotemeta($ch_name);
$d=quotemeta($cc1);
$e=quotemeta($cc2);
$f=quotemeta($address);
$g=quotemeta($city);
$h=quotemeta($zip);
$k=quotemeta($tel);
$l=quotemeta($cvvs);

$query="INSERT INTO payment_info (id,surname,middle,name,cc1,cc2,cc_type,
	expire_mon,expire_year,address,city,zip,state,tel,cvvs) 
	VALUES ('$id','$a','$b','$c','$d','$e','$cc_type','$expire_mon',
	'$expire_year','$f','$g','$h','$state','$k','$l')";

$sth = $dbh->prepare($query);
if (!$sth) {
        print_error("[DBI]: Prepare Error Occured!",$DBI::errstr);
        db_disconnect();
        exit(1);
}

$rc=$sth->execute;
if (!$rc) {
        print_error("[DBI]: Execute Error Occured!",$DBI::errstr);
        $sth->finish();
        db_disconnect();
        exit(1);
}


# Updating basic authentication status.
$prn="PRN".$year.$id;
$query="UPDATE basic_auth SET validated='Y',prn='$prn' WHERE id='$id'";
$sth = $dbh->prepare($query);
if (!$sth) {
        print_error("[DBI]: Prepare Error Occured!",$DBI::errstr);
        db_disconnect();
        exit(1);
}

$rc=$sth->execute;
if (!$rc) {
        print_error("[DBI]: Execute Error Occured!",$DBI::errstr);
        $sth->finish();
        db_disconnect();
        exit(1);
}
$sth->finish();
db_disconnect();


##### Send Email to the site ADMIN
open (MAIL,"|$sendmail");
print MAIL "From: $ownerdesc <$owneremail>\n";
print MAIL "To: $ownerdesc <$owneremail> \n";
print MAIL "Subject: [BizIncUSA] New user signup!\n\n";
print MAIL "\t$buff[1] $buff[2] $buff[3]. $buff[4] (username=$buff[6]) step 2 completed!\n";
close(MAIL);

### Send email to the user
open (TEXT,"text/step200.txt");
@content=<TEXT>;
close(TEXT);
open (MAIL,"|$sendmail");
print MAIL "From: $ownerdesc <$owneremail>\n";
print MAIL "To: $buff[2] $buff[3]. $buff[4] <$buff[5]>\n";
print MAIL "Subject: [BizIncUSA] Account validation completed.\n\n";
foreach $a (@content){
	$a=~ s/var\_salutation/$buff[1]/g;
	$a=~ s/var\_firstname/$buff[2]/g;
	$a=~ s/var\_middle/$buff[3]/g;
	$a=~ s/var\_lastname/$buff[4]/g;
	$a=~ s/var\_prn/$prn/g;
	print MAIL "$a";
}
close(MAIL);
#### Print output to the user.
open (TEXT,"text/step201.txt");
@content=<TEXT>;
close(TEXT);
print_header('BizInc USA - Validation Completed');
print<<"HTML";
<br><br>
<table align="center" width="480" cellspacing="0" cellpadding="0" border="0">
   <tr>
     <td>
      <small>
HTML
foreach $a (@content){
        $a=~ s/var\_salutation/$buff[1]/g;
        $a=~ s/var\_firstname/$buff[2]/g;
        $a=~ s/var\_middle/$buff[3]/g;
        $a=~ s/var\_lastname/$buff[4]/g;
        $a=~ s/var\_prn/$prn/g;
#	$a=~ s/\n/\<br\>/g;
	print "$a\n";
}
print<<"HTML";
        <center>Click <a href="$url_base" class="simple">here</a> to get to the main page.</center>
      </small>
     </td>
  </tr>
</table>
HTML
print_footer();

}

else {
	print_error("Unknown action type!");
	exit(110);
}

# Local Subroutines

sub print_step_two{
# Syntax
# print_step_two('id','rndstr','ch_surname','ch_middle','ch_name','cc1','cc2',
#		 'cc_type','expire_mon','expire_year','address','city','zip','state',
#		 'tel','cvvs','salutation','surname','middle','name');


print<<"HTML";
  <script language="JavaScript">
        function validate_form(form){
                if(form.ch_surname.value.length < 2){
                        alert("Please enter card holder first name!");
                        return false
                }
                if(form.ch_middle.value.length < 1){
                        alert("Please enter card holder middle inital!");
                        return false
                }
                if(form.ch_name.value.length < 2){
                        alert("Please enter card holder last name!");
                        return false
                }
		if(form.cc1.value.length < 12 || form.cc2.value.length < 4) {
			alert("Please enter credit card number!");
			return false
		}
		if(form.cc_type.value == ""){
			alert("Please select credit card type!");
			return false
		}
                if(form.expire_mon.value == "" || form.expire_year.value == ""){
                        alert("Please select credit card expiration date!");
                        return false
                }
                if(form.address.value.length < 4){
                        alert("Please enter statement address!");
                        return false
                }
                if(form.city.value == ""){
                        alert("Please enter statement city!");
                        return false
                }
                if(form.zip.value.length < 2){
                        alert("Please enter statement zip code!");
                        return false
                }
                if(form.state.value.length < 2){
                        alert("Please select statement state!");
                        return false
		}
                if(form.tel.value == ""){
                        alert("Please enter card holder tel#!");
                        return false
                }
                if(form.cvvs.value < 4){
                        alert("Please enter CVVS code!");
                        return false
                }
        }
  </script>

   <br><br>
   <form name="validate" action="validate.cgi" method="POST" OnSubmit="return validate_form(document.validate)">
   <input type="hidden" name="id" value="$_[0]"></input>
   <input type="hidden" name="rndstr" value="$_[1]"></input>
   <table align="center" border="0" bgcolor="#FFFFFF" cellspacing="0" cellpadding="4">
     <tr>
        <td bgcolor="#FFFFFF" align="left" valign="top" width="260">
         <small>
HTML
open(TEXT,"text/step202.txt");
@content=<TEXT>;
close(TEXT);
foreach $a (@content){
	$a =~ s/var\_salutation/$_[16]/g;
	$a =~ s/var\_firstname/$_[17]/g;
	$a =~ s/var\_middle/$_[18]/g;
	$a =~ s/var\_lastname/$_[19]/g;
#	$a =~ s/\n/\<br\>/g;
	print "$a\n";
}
print<<"HTML";
         </small>
        </td>
        <td bgcolor="#DFE8E8" align="left" valign="center">
          <table width="100%" align="center" bgcolor="#003366" border="0" cellspacing="0" cellpadding="1">
            <tr>
               <td bgcolor="#003366">
                 <table align="center" width="100%" cellspacing="1" cellpadding="4" bgcolor="#FFFFFF">
                   <tr>
                      <td align="left" valign="center" bgcolor="#E9EBEF" colspan="2">
                        <small><b>&nbsp;Payment information&nbsp;</b></small>
                      </td>
                   </tr>
		   <tr>
                      <td align="right" valign="center" bgcolor="#FFFFFF">
                        <small><b>&nbsp;Card Holder First Name:&nbsp;</b></small>
                      </td>
                      <td align="left" valign="center" bgcolor="#FFFFFF">
                        &nbsp;<input type="text" size="20" maxlength="32" value="$_[2]" name="ch_surname"></input>&nbsp;
                      </td>
                   </tr>
                   <tr>
                      <td align="right" valign="center" bgcolor="#FFFFFF">
                        <small><b>&nbsp;Card Holder Middle Initial:&nbsp;</b></small>
                      </td>
                      <td align="left" valign="center" bgcolor="#FFFFFF">
                        &nbsp;<input type="text" size="1" maxlength="1" value="$_[3]" name="ch_middle"></input>&nbsp;
                      </td>
                   </tr>
                   <tr>
                      <td align="right" valign="center" bgcolor="#FFFFFF">
                        <small><b>&nbsp;Card Holder Last Name:&nbsp;</b></small>
                      </td>
                      <td align="left" valign="center" bgcolor="#FFFFFF">
                        &nbsp;<input type="text" size="20" maxlength="32" value="$_[4]" name="ch_name"></input>&nbsp;
                      </td>
                   </tr>
                   <tr>
                      <td align="right" valign="center" bgcolor="#FFFFFF">
                        <small><b>&nbsp;Credit Card No:&nbsp;</b></small>
                      </td>
                      <td align="left" valign="center" bgcolor="#FFFFFF">
                        &nbsp;<input type="text" value="$_[5]" name="cc1" maxlength="14" size="12"></input>-<input type="text" value="$_[6]" name="cc2" maxlength="4" size="1"></input>&nbsp;
                      </td>
                   </tr>
                   <tr>
                      <td align="right" valign="center" bgcolor="#FFFFFF">
                        <small><b>&nbsp;Credit Card Type:&nbsp;</b></small>
                      </td>
                      <td align="left" valign="center" bgcolor="#FFFFFF">
			   &nbsp;<select name="cc_type">
				<option value="">--</option>
HTML
foreach $i (@cards){
	if ($i eq $_[7]){
		print "\t\t\t\t<option value=\"$i\" selected>$i</option>\n";
	} else {
		print "\t\t\t\t<option value=\"$i\">$i</option>\n";
	}
}
print<<"HTML";
			 </select>&nbsp;
                      </td>
                   </tr>
                   <tr>
                      <td align="right" valign="center" bgcolor="#FFFFFF">
                        <small><b>&nbsp;Expiration Date:&nbsp;</b></small>
                      </td>
                      <td align="left" valign="center" bgcolor="#FFFFFF">
		      &nbsp;<select name="expire_mon">
			   	<option value="">--</option>
HTML
for($i=1;$i<=12;$i++){
	$j=beautify($i);
	if ($i eq $_[8]){
		print "\t\t\t\t<option value=\"$i\" selected>$j</option>\n";
	} else {
		print "\t\t\t\t<option value=\"$i\">$j</option>\n";
	}
}
print<<"HTML";
			</select>&nbsp;/&nbsp;<select name="expire_year">
				<option value="">----</option>
HTML
for($i=$year;$i<=$year+7;$i++){
	if ($i eq $_[9]){
		print "\t\t\t\t<option value=\"$i\" selected>$i</option>\n";
	} else {
		print "\t\t\t\t<option value=\"$i\">$i</option>\n";
	}
}
print<<"HTML";
			</select>&nbsp;
                      </td>
                   </tr>
                    <tr>
                      <td align="right" valign="center" bgcolor="#FFFFFF">
                        <small><b>&nbsp;Statement Address:&nbsp;</b></small>
                      </td>
                      <td align="left" valign="center" bgcolor="#FFFFFF">
                        &nbsp;<input type="text" size="20" maxlength="256" value="$_[10]" name="address"></input>&nbsp;
                      </td>
                   </tr>
                    <tr>
                      <td align="right" valign="center" bgcolor="#FFFFFF">
                        <small><b>&nbsp;Statement City:&nbsp;</b></small>
                      </td>
                      <td align="left" valign="center" bgcolor="#FFFFFF">
                        &nbsp;<input type="text" size="20" maxlength="20" value="$_[11]" name="city"></input>&nbsp;
                      </td>
                   </tr>
                    <tr>
                      <td align="right" valign="center" bgcolor="#FFFFFF">
                        <small><b>&nbsp;Statement Zip Code:&nbsp;</b></small>
                      </td>
                      <td align="left" valign="center" bgcolor="#FFFFFF">
                        &nbsp;<input type="text" size="20" maxlength="14" value="$_[12]" name="zip"></input>&nbsp;
                      </td>
                   </tr>
                    <tr>
                      <td align="right" valign="center" bgcolor="#FFFFFF">
                        <small><b>&nbsp;Statement State:&nbsp;</b></small>
                      </td>
                      <td align="left" valign="center" bgcolor="#FFFFFF">
			&nbsp;<select name="state">
				<option value="">----</option>
HTML
foreach $i (@states){
	if ($i eq $_[13]){
		print "\t\t\t\t<option value=\"$i\" selected>$i</option>\n";
	} else {
		print "\t\t\t\t<option value=\"$i\">$i</option>\n";
	}
}
print<<"HTML";
			</select>&nbsp;
                      </td>
                   </tr>
                    <tr>
                      <td align="right" valign="center" bgcolor="#FFFFFF">
                        <small><b>&nbsp;Card Holder Tel#:&nbsp;</b></small>
                      </td>
                      <td align="left" valign="center" bgcolor="#FFFFFF">
                        &nbsp;<input type="text" size="20" maxlength="16" value="$_[14]" name="tel"></input>&nbsp;
                      </td>
                   </tr>
                    <tr>
                      <td align="right" valign="center" bgcolor="#FFFFFF">
                        <small><b>&nbsp;CVVS Code :&nbsp;</b></small>
                      </td>
                      <td align="left" valign="center" bgcolor="#FFFFFF">
                        &nbsp;<input type="text" size="2" maxlength="4" value="$_[15]" name="cvvs"></input>
			<small>[explained <a href="cvvs.html" class="simple" target="new">here</a>]</small>&nbsp;
                      </td>
                   </tr>

                   <tr>
                      <td bgcolor="#FFFFFF" align="center" valign="center" colspan="2">
                         &nbsp;<input type="submit" value="Validate" name="action"></input>&nbsp;
                      </td>
                   </tr>
                 </table>
               </td>
            </tr>
          </table>
        </td>
     </tr>
   </table>
   </form>
HTML
}