#!/usr/bin/perl
# Michael Tartaglia
# Password program creates accounts and verifies entries,
#    passwords are stored in "password.txt"


use CGI ':standard';
require template;
my $fileName = "password.txt";

template::startHTML("Program # 5","Secure Page 2");

if ($ENV{'QUERY_STRING'} ne "") {		# IF THERE WAS A QUERY...
 my $mesg = "";

 if (param('new') ne "1") {			# IF A NEW ACCOUNT ISN'T REQUESTED
	my %PASSES; my $savedName; my $savedPass;
	my $pw = param('pw'); $pw = crypt("\L$pw\E", 3);
	my $name = param('name'); $name = "\L$name\E";
				  $name =~ s/://g;

	open (P, "<$fileName");			# OPEN PASSWORD FILE
	flock (P, 1);
	my @keys = <P>;
	close (P);

	foreach (@keys) {			# SAVE PASSWORDS IN LOGIN-INDEXED HASH
		($savedName, $savedPass) = split(/:/,$_);
		$PASSES{$savedName} = $savedPass;
		$PASSES{$savedName} =~ s/\n//;
	}

	if ($pw eq $PASSES{$name}) {	# IF USER LOGIN AND PASSWORDS MATCH
		$mesg = "<b><font color=green>Great!</font></b>"
			. " You would now have access!";
	} else {			# IF USER LOGIN AND PASSWORDS DIDN'T MATCH
		$mesg = "<b><font color=goldenrod>Incorrect!</font></b>"
			. " Still no access.";
	}

 } elsif (param('new') eq "1") {	# IF A NEW ACCOUNT IS TO BE CREATED
	my $x = saveID();
	my $pw = param('pw'); $pw = "\L$pw\E";
	my $name = param('name'); $name = "\L$name\E";

	if ($x) {			# IF THERE WAS NO TROUBLE MAKING ACCOUNT
		$mesg = "<b><font color=goldenrod>Account created!</font></b>"
			. " Name: \"<i>$name</i>\", Password: \"<i>$pw</i>\"";
	} else {			# IF, SAY, USERNAME ALREADY EXISTS
		$mesg = "<b><font color=red>Account not made.</font></b>"
			. " Username exists.";
	}
 }

 # PRINT MESSAGE
 print "\n\t<SPAN STYLE=\"background:#F1F1F1;border:thin double #808080;\">",
       "&nbsp;$mesg&nbsp;</SPAN><BR><BR>";
}


# PRINT HEADING, INFORMATION, AND INSTRUCTIONS
print "\n\tThis page is an extention of <a href=\"../secure/secure.html\">",
      "\n\tthe secure page</a>.<br>(Try user \"houlihan\" with password ",
      "\n\t\"cs3300\".)<br>This program needs a little work.<br><br><form ",
      "\n\taction=\"password.cgi\" method=\"get\"><table class=\"noBr\">",
      "\n\t<tr><td>User name:</td><td><input type=text name=name></td></tr>",
      "\n\t<tr><td>Password:</td><td><input type=password name=pw></td></tr>",
      "\n\t<tr><td colspan=2 align=center>",
	"\n\t<input type=submit value=Submit><input type=reset><br>",
	"\n\t<input type=checkbox value=1 name=new>new user?",
      "\n\t</td></tr></table></form>\n\n";

template::endHTML();



# SUBROUTINE READS IN PARAMETERS AND SAVES LOGIN AND ENCRYPTED PASSWORDS
sub saveID
{
 my $pw = param('pw'); $pw = crypt("\L$pw\E", 3);	# PASSWORD ENCRYPTION 1-WAY
 my $name = param('name'); $name = "\L$name\E";
 my $toSave = "$name:$pw\n";
 my @stuff; my $x = 1;

 open (P, "<$fileName");
 flock (P, 1);
 @stuff = <P>;
 close (P);

 foreach (@stuff) {
  ($a, $b) = split (/:/,$_);
  $x = 0 if ($a eq $name);
 }

 if ($x) {
  open (P, ">>$fileName");
  flock (P, 2);
  print P $toSave;
  close (P); 
 }
 return $x;
}