#!/usr/bin/perl ############################################### ### ### John Jan Popovic, http://1stmuse.com ### for Etranet /D.L. ### 2012 ### ### ############################################### BEGIN { my $b__dir = (-d '/home/loyaltyh/perl'?'/home/loyaltyh/perl':( getpwuid($>) )[7].'/perl'); unshift @INC,$b__dir.'5/lib/perl5',$b__dir.'5/lib/perl5/x86_64-linux-thread-multi',map { $b__dir . $_ } @INC; } use CGI qw (:standard); use CGI::Carp qw(fatalsToBrowser); use lib qw(.); use CGI qw(nph); #use utf8; ############################################### ### Set Configurations Below ############################################### ### Specify database OPERE fields in the array below @fields = ( "SHOP_Id", "SHOP_Pwd", "SHOP_salesPoint", "SHOP_address", "SHOP_telephone", "SHOP_email", "SHOP_GIS_coordinates", "SHOP_referral_person", "SHOP_contractNumber", "SHOP_activityStatus" ); ### Set URL and email fields to be hyperlinks ### The number used corresponds to its placement in the array above ### Remeber to start your count at zero ### Leave the variables empty to remove the hyperlink $script_name ="$ENV{'SCRIPT_NAME'}"; $homedir = $ENV{'DOCUMENT_ROOT'}; $root_ = $ENV{'DOCUMENT_ROOT'}; ### Specify the required fields below. This may be left empty @required = (); ### Specify the filtered words below. This may be left empty @filter = ("word1","word2"); $database = "$ENV{'DOCUMENT_ROOT'}/dubravica/dubravica_shops.txt"; # Data file OPERE name and path $user_file = "$ENV{'DOCUMENT_ROOT'}/dubravica/users.txt"; # User file name and path # This script name $db_name = "dubravica"; # The database name $table_width = "90%"; # The display width of the entire table $record_width = "80%"; # The display width of the database records $max_rows_returned = "20"; # Max number of rows displayed per page $filter_html_tags = "yes"; # Removes HTML tags from record entries $check_user_duplicates = "yes"; # Checks for duplicate user names in user file $use_external_html = "no"; # Set to "yes" to use your own html template $external_html_header = "header.html"; # File name and path to html template header $external_html_footer = "footer.html"; # File name and path to html template footer $authenticate = "yes"; # Prompts users for a user name and Lozinka $register = "yes"; # Allows new user registration $record_ownership = "yes"; # Users can modify/delete only their records $admin_user_name = "admin"; # This is the default Administrator user name $default_user_permission_search = "yes"; # Gives newly registered users Search permission $default_user_permission_add = "yes"; # Gives newly registered users Add permission $default_user_permission_modify = "no"; # Gives newly registered users Modify permission $default_user_permission_delete = "no"; # Gives newly registered users Delete permission $defult_search_index = "0"; $image_path = 'http://1stmuse.com/opere'; ############################################### ### Change Nothing Below This Line ############################################### ############## Global Viariables ################## $q = new CGI; $field_count = @fields; $colspan = $field_count+1; $EXCLUSIVE = 2; $UNLOCK = 8; $user = $q->param(user); $user = $q->cookie(user) if($user eq ""); $user_search = $q->param(user_search); $user_search = "yes" if($authenticate eq "no"); $user_add = $q->param(user_add); $user_add = "yes" if($authenticate eq "no"); $user_trans = $q->param(user_trans); $user_trans = "yes" if($authenticate eq "no"); $user_modify = $q->param(user_modify); $user_modify = "yes" if($authenticate eq "no"); $user_delete = $q->param(user_delete); $user_delete = "yes" if($authenticate eq "no"); $selected_user = $q->param(selected_user); $admin_add = $q->param(admin_add); $sort = $q->param(sort_on); $search_for = $q->param(search_for); $shop_id = $q->param(shop_id); $shop_pwd = $q->param(shop_pwd); $dubravica_customer= $q->param(dubravica_customer); $search_field = $q->param(search_field); $action = $q->param(action); $display = $q->param(display); @keys = $q->param(key); $key = $q->param(key); $bodovi = $q->param(bodovi); $email = $q->param(email); $billing_file = $q->param(billing_file); $key_matches = @keys; $search_field = "all" if($search_field eq ""); $search_for = '.' if ($search_for eq ""); $action = $q->param(which_search) if($action =~ /^View/i); $find_ = $q->param(find_); $id_ = $q->param(id_); $filter_ = $q->param(filter_); $search_field_ = $q->param(search_field_); ################# Main Logic ################## ######## if($action =~ /logout/i){ &logout; exit;} if($authenticate eq "yes"){ if($action =~ /login/i){ &search_db($shop_id); $title="Shop"; $button_text = ""; $choose="search"; $what="search"; &show_card($shop_pwd);} elsif($action =~ /glavna/i){&search_db($search_for); $title="Shop";&default_card;} # elsif($action =~ /billing_report/i){ $title="Billing results"; &other_billing_results($shop_id); } elsif($action =~ /billing_report/i){ $title="Billing results"; &show_card($shop_pwd); } elsif($action =~ /save_record/i){ $title="Shop"; &delete_records; $key=$keys[0]; &add_record; &search_db($SHOP_Id);$title="Shop";&default_card;} elsif($action =~ /Edit_opera/i){ $title="Editing Error"; $kljuc =$key; &search_key($kljuc); &print_modify_page;} else { $title="Main Menu"; &print_default($title); } } exit; ################################################################################################################################ ################### Login ################### sub login { $message = $_[0]; $title = "Login"; &print_default; } ################ Default Screen ################## sub print_default { &html_header; print< Unesite SHOP ID:
Lozinka:


Napomena: ukoliko niste mijenjali lozinku, početna lozinka je ista kao i SHOP ID. Nakon prijave, molimo Vas da promijenite svoju lozinku.

HTML } # End of print_default subroutine. ################### Filter #################### sub filter{ $temp = $_[0]; $temp =~ s/\|//g; $temp =~ s/\"/'/g; foreach $removed (@filter) { $temp =~ s/$removed/\?\$\%\&/gi; } if ($filter_html_tags eq "yes") { $temp =~ s/<[^>]*>//gs; } return ($temp); } ############### Check Item ################# sub check_item{ $r_val = $_[0]; $index = $_[1]; if($r_val =~ /^\s*$/){$r_val=" "; return($r_val);} if( ($index_of_image_url ne "") && (($index eq $index_of_image_url)|($index eq $index2_of_image_url)) ) { if ($r_val =~ /http:\/\//i){ $link = "$r_val"; } else { $link = "http://1stmuse.com/opere/"; $link .= "$r_val"; } $r_val2 = "$r_val"; $r_val = $r_val2; } if($index_of_URL ne "" && $index eq $index_of_URL) { $r_val2 = "$r_val"; $r_val = $r_val2; } if($index_of_email ne "" && $index eq $index_of_email) { $r_val2 = "$r_val"; $r_val = $r_val2; } return($r_val); } ################# Logout ################### sub logout { $set_cookie = "yes"; $message = "User logged out"; &login($message); } # end of logout ############ Encrypt Lozinka ############### sub auth_encrypt { local ($field, $salt) = @_; $field = crypt ($field, $salt); $field; } # end of encrypt ############## Access Problem ############## sub access_problem { &html_header($title); print< Error!

$error_message



HTML &html_footer; exit; } ################ Get Date ################## sub get_date { local ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst,$date); local (@days, @months); @days = ('Sunday','Monday','Tuesday','Wednesday','Thursday','Friday','Saturday'); @months = ('January','February','March','April','May','June','July','August','September','October','November','December'); ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time); if ($hour < 10) { $hour = "0$hour"; } if ($min < 10) { $min = "0$min"; } if ($sec < 10) { $sec = "0$sec"; } $mon++; $year += 1900; $date = "$mday/$mon/$year at $hour\:$min\:$sec"; return $date; } ############## Form Header ################# sub form_header { print< HTML } ############## Form Footer ################# sub form_footer { if($footer eq "default") { if ($authenticate eq "yes") { print "\n"; } } elsif($footer eq "login") { print "\ \;"; } else { # print ""; if ($authenticate eq "yes") { print "";} } print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; } ############## HTML Header ################# sub html_header{ print "Content-type:text/html; charset=utf8\n\n"; print< $db_name - $_[0]

$db_name

$_[1]

$_[0]

HTML &form_header; } ############## HTML Footer ################# sub html_footer{ if($use_external_html eq "yes") { %external_variables = (title=>$title, message=>$message,); &form_footer; print html_template("$external_html_footer", \%external_variables); print "

Powered by dbSpace
\©\; Spaceout

"; } else { print<
HTML &form_footer; print<

HTML } } ########### Search Cards Database ############# sub search_cards{ my $search_for = $_[0]; $target_record =""; my @results =(); my $cardId; $search_for =~ s/\s//g; $search_for =~ s/\D//g; open (DB, "$database") or die "Error opening database. $database $!\n"; while(){ ($key,$dbuser,$when_added,$Broj_kartice, $oib,$Ime,$Prezime,$Datum_rodjenja, $Kartica_vrijedi_do,$bodovi,$Paket,$email,$popup) = split(/\|/, $_); $cardId = +$Broj_kartice; $cardId =~ s/\s//g; if ($cardId > 0) { if ($cardId eq $search_for) { push @results, $_}; }; } # End of while. close (DB); my $count = @results; if ($count < 1){ $target_record =""; $err_message="Error=100 Neregistrirana kartica $search_for"; } if($count > 1){ $target_record =""; $err_message="Error=101 Too many results found for CardId $search_for"; } if($count == 1){ $target_record = @results[0]; $err_message=""; }; # Print HTTP header for PLAIN TEXT print "$Ime"; } # End of search_cards subroutine. ############## Delete Records ################# sub delete_records { open (DATABASE, "$database") or die "Error opening file: $!\n"; while () { $line = $_; chop $line; @dbfields = split (/\|/, $line); $deleted = "no"; if ($dbfields[0] eq $q->param(key)) { $deleted = "yes"; if ($user eq $dbfields[1]) { $security_satisfied = "yes"; } } elsif ($deleted ne "yes") { $new_data .= "$line\n"; } } #end of while close (DATABASE); if ($authenticate ne "yes") { $security_satisfied = "yes"; } $security_satisfied = "yes"; if ($security_satisfied ne "yes" && $record_ownership eq "yes" && $admin_user_name ne "$user") { $error_message = "Vi nemate potrebne ovlasti za promijenu podataka."; &access_problem($error_message); exit; } else { flock DATABASE, $EXCLUSIVE; open (DATABASE, ">$database") or die "Error opening file: $!\n"; print DATABASE "$new_data"; close (DATABASE); flock DATABASE, $UNLOCK; } } ################# Add Record ################## sub add_record { foreach $required (@required){ if($q->param($required) eq "") { $title = "Add A Record"; $error_message = "You did not fill out the required information!"; &access_problem($error_message); exit; } } $when_added = &get_date; $key = time(); $record=$key; $record .= "\|$user"; $record .= "\|$when_added"; foreach $field (@fields){ ${$field} = $q->param($field); ${$field} = filter(${$field}); $record .= "\|${$field}"; } unless (-e $database){ open (DB, ">$database") || die "Error creating database. $!\n"; } else { open (DB, ">>$database") || die "Error opening database. $!\n"; } flock DB, $EXCLUSIVE; seek DB, 0, 2; print DB "$record\n"; flock DB, $UNLOCK; close(DB); } # End of add_record subroutine. ############### Modify Screen new ################ sub print_modify_page{ $record =$results[0]; chomp $record; ($key,$dbuser,$when_added,@field_vals) = split(/\|/, $record); $title="Modify Record"; &html_header($title); print< HTML $x=0; foreach $field (@fields){ $input_txt=""; $input_html=$input_txt; print< HTML $x++; } # End of foreach. print<

HTML &html_footer; } ############# Results Screen ################ sub default_card{ &html_header($title); $cerca = $search_for; $which_search = $choose; print "\n"; print "\n"; print "\n"; print "\n"; $record =@results[0]; chomp $record; ($key,$dbuser,$when_added, $SHOP_Id, $SHOP_Pwd, $SHOP_salesPoint, $SHOP_address, $SHOP_telephone, $SHOP_email, $SHOP_GIS_coordinates, $SHOP_referral_person, $SHOP_contractNumber, $SHOP_activityStatus ) = split(/\|/, $record); $recorded_Lozinka =$SHOP_Pwd; $dubravica_customer ="$SHOP_salesPoint, $SHOP_address"; $datum = &get_date; $datum =~ s/at/ u /; print<


Datum: $datum

Shop ID: $SHOP_Id

Shop: $dubravica_customer

WWW print " "; $Stanje_bodova =~ s/\,/\./g; $Stanje_bodova = sprintf("%.2f", $Stanje_bodova); $Stanje_bodova =~ s/\./\,/g; print<

Dolje se nalazi ispis svih transakcija u ovome mjesecu.

WWW chomp $Email; my $billing_path= "$ENV{'DOCUMENT_ROOT'}/dubravica_billing"; my $file; my @filenames =(); my @billing_files =(); opendir(DIRHANDLE,$billing_path ); @filenames = readdir(DIRHANDLE); closedir(DIRHANDLE); @billing_files = grep(/billing/,@filenames); my @file_names =sort(@billing_files); $options = qq~~; $n_files = @file_names; $x =0; foreach $file (@file_names) { chomp $file; $period =$file; $x++; $selected =""; if ($n_files == $x) { $selected="selected"; }; $period =~ s/(\.txt)|(billing)//g; $options .= qq~ \n~; } $bodovi=~ s/\./\,/g; &billing_results($SHOP_Id); print qq~ Odaberite, ako želite vidjeti izvještaj za neki drugi mjesec: ~; print " "; $which_search = $choose; print "\n"; print "\n"; print "\n"; print "\n"; print "

"; $cerca_t=$cerca; if ($cerca eq '.') {$cerca_t='tutto'}; &html_footer; } # End of show_card subroutine. ########### Search & Sort Database ############# sub search_db{ my $shop_id = $_[0]; @results =(); open (DB, "$database") || die "Error opening database. $!\n"; while(){ ($k,$dbuser,$when_added,$shopid,$lozinka,@resto) = split(/\|/, $_); if ($shopid eq $shop_id) { push @results, $_}; } # End of while. close (DB); $count = @results; if($count < 1){ $message="Netočni pristupni podaci. Ukoliko ste zaboravili pristupne podatke, kontaktirajte dubravica!"; $title="Main Menu"; &print_default($title, $message); exit; } } # End of search_db subroutine. ############# Results Screen ################ sub show_card{ &html_header($title); $cerca = $search_for; $which_search = $choose; print "\n"; print "\n"; print "\n"; print "\n"; $record =@results[0]; chomp $record; ($key,$dbuser,$when_added, $SHOP_Id, $SHOP_Pwd, $SHOP_salesPoint, $SHOP_address, $SHOP_telephone, $SHOP_email, $SHOP_GIS_coordinates, $SHOP_referral_person, $SHOP_contractNumber, $SHOP_activityStatus ) = split(/\|/, $record); $recorded_Lozinka =$SHOP_Pwd; $dubravica_customer ="$SHOP_salesPoint, $SHOP_address"; if ($recorded_Lozinka eq $shop_pwd) { $datum = &get_date; $datum =~ s/at/ u /; print<


Datum: $datum

Shop ID: $SHOP_Id.

Shop: $dubravica_customer

WWW print " "; $Stanje_bodova =~ s/\,/\./g; $Stanje_bodova = sprintf("%.2f", $Stanje_bodova); $Stanje_bodova =~ s/\./\,/g; print<

Dolje se nalazi ispis svih transakcija u ovome mjesecu.

WWW chomp $Email; my $billing_path= "$ENV{'DOCUMENT_ROOT'}/dubravica_billing"; my $file; my @filenames =(); my @billing_files =(); opendir(DIRHANDLE,$billing_path ); @filenames = readdir(DIRHANDLE); closedir(DIRHANDLE); @billing_files = grep(/billing/,@filenames); my @file_names =sort(@billing_files); $options = qq~~; $n_files = @file_names; $x =0; foreach $file (@file_names) { chomp $file; $period =$file; $x++; $selected =""; if ($n_files == $x) { $selected="selected"; }; $period =~ s/(\.txt)|(billing)//g; $options .= qq~ \n~; } $bodovi=~ s/\./\,/g; &billing_results($SHOP_Id); print qq~ Odaberite, ako želite vidjeti izvještaj za neki drugi mjesec: ~; print " "; } else { print qq~

Netočni pristupni podaci. Ukoliko ste zaboravili pristupne podatke, kontaktirajte dubravica!

~; } $which_search = $choose; print "\n"; print "\n"; print "\n"; print "\n"; print "

"; $cerca_t=$cerca; if ($cerca eq '.') {$cerca_t='tutto'}; &html_footer; } # End of show_card subroutine. ########### Search Key Record ############# sub search_key{ my $key = $_[0]; $target_record =""; my @resto =(); @results =(); open (DB, "$database") || die "Error opening database. $!\n"; while(){ ($k,$dbuser,$when_added,$shopid,$lozinka,@resto) = split(/\|/, $_); if ($key eq $k) { push @results, $_}; } # End of while. close (DB); } ########### Cards Lookup ############# sub cards_lookup{ %card_hash =(); my $cardId; $database_cards = "$ENV{'DOCUMENT_ROOT'}/dubravica/dubravica_clients.txt"; open (DB, "$database_cards") or die "Error opening database. $database_cards $!\n"; while(){ ($key,$dbuser,$when_added,$CARD_Broj_kartice, $CARD_OIB,$CARD_Ime,$CARD_Prezime,$CARD_Datum_rodjenja, $CARD_Exp_date,$CARD_Bodovi,$CARD_Brand,$CARD_email,$CARD_popup) = split(/\|/, $_); $cardId = +$CARD_Broj_kartice; $cardId =~ s/\s//g; if ($key > 0) { $card_hash{$cardId} = "$CARD_Ime $CARD_Prezime, bodovi: $CARD_Bodovi, email: $CARD_email"; } } # End of while. close (DB); } # End of cards_lookup subroutine. ########### terminals_lookup ############# sub terminals_lookup{ %terminal_hash =(); $database_shops = "$ENV{'DOCUMENT_ROOT'}/dubravica/dubravica_shops.txt"; open (DB, "$database_shops") or die "Error opening database. $database_shops $!\n"; while(){ ($key,$owner,$time_stamp, $TERMINAL_terminalId,$TERMINAL_terminalPwd,$TERMINAL_salesPoint,$TERMINAL_address, $TERMINAL_telephone,$TERMINAL_email,$TERMINAL_GIS_coordinates,$TERMINAL_referral_person, $TERMINAL_contractNumber,$TERMINAL_activityStatus) = split(/\|/, $_); $terminalId = $TERMINAL_terminalId; $terminalId =~ s/\s//g; if ($terminalId ne "") { $terminal_hash{$terminalId} = "$TERMINAL_salesPoint, $TERMINAL_address, email: $TERMINAL_email"; }; } # End of while. close (DB); } # End of Search Terminals Database subroutine. ############# Billing Results ################ sub billing_results{ my $search_for = $_[0]; my $search_field = $_[1]; my @results =(); my %shop_hash =(); my %terminal_hash =(); my $revenue=0; my $expenditure=0; # build shop hash $database_shops = "$ENV{'DOCUMENT_ROOT'}/dubravica/dubravica_shops.txt"; open (DB, "$database_shops") or die "Error opening database. $database_shops $!\n"; while(){ ($key,$owner,$time_stamp, $SHOP_Id, $SHOP_Pwd, $SHOP_salesPoint, $SHOP_address, $SHOP_telephone, $SHOP_email, $SHOP_GIS_coordinates, $SHOP_referral_person, $SHOP_contractNumber, $SHOP_activityStatus) = split(/\|/, $_); $terminalId = $SHOP_Id; $terminalId =~ s/\s//g; if ($terminalId ne "") { $shop_hash{$terminalId} ="$SHOP_salesPoint - $SHOP_address"; }; } # End of while. close (DB); # build terminal hash $database_terminals = "$ENV{'DOCUMENT_ROOT'}/dubravica/dubravica_terminals.txt"; open (DB, "$database_terminals") or die "Error opening database. $database_terminals $!\n"; while(){ ($key,$owner,$time_stamp, $TERMINAL_terminalId,$TERMINAL_terminalPwd,$TERMINAL_salesPoint,$TERMINAL_referral_person, $TERMINAL_contractNumber,$TERMINAL_activityStatus) = split(/\|/, $_); $terminalId = $TERMINAL_terminalId; $terminalId =~ s/\s//g; if ($terminalId ne "") { $terminal_hash{$terminalId} =$TERMINAL_salesPoint; }; } # End of while. close (DB); # end of terminal and shop hash built $date_time = &get_date; $datum =$date_time; $date_time =~ s/at/~/g; ($date,$day_time) = split (/\~/,$date_time); $date =~ s/[\s]//g; $date =~ s/[\/]/~/g; ($dd,$mm,$yy) = split (/\~/,$date); # Format $dd,$mm numbers with up to 2 leading zeroes $dd = sprintf("%02d", $dd); $mm = sprintf("%02d", $mm); $billing_file_this_month = "$ENV{'DOCUMENT_ROOT'}/dubravica_billing/billing" . $yy . "_". $mm . ".txt"; open (BILL, "$billing_file_this_month") or die "Error opening $billing_file_this_month $!\n"; @Billing_line = ; close (BILL); foreach $billing_record (@Billing_line){ ($key,$LOGuser,$when_added,$dubravica_Day,$dubravica_TimeStamp,$dubravica_TerminalId,$dubravica_CardId,$dubravica_Amount) = split(/\|/, $billing_record); # if ($dubravica_TerminalId =~ /$search_for/oi) { push @results,$billing_record # }; } # End of foreach $count = @results; &cards_lookup; &terminals_lookup; print< HTML $rows_left_to_view = $total_row_count - $new_hits_seen; $start_hit = $hits_seen + 1; $end_hit = $new_hits_seen; $hits_displayed = $end_hit - $start_hit + 1; $cerca = $search_for; print "
"; $which_search = $choose; ############### next page buttons &next_page_buttons($rows_left_to_view); print "\n"; print "\n"; print "\n"; ############### end PRINT BUTTON which_search ####### my $display = "columns"; print<

\u$field: $input_html
HTML if($choose =~ /(modify|delete)/){ print "\n"; } print<dubravica_Day HTML foreach $record (@results){ ($key,$LOGuser,$when_added,$dubravica_Day,$TimeStamp,$TerminalId,$CardId,$Amount ) = split(/\|/, $record); print "\n"; if($choose =~ /(modify|delete)/){ print "\n"; } # End of if. $amount = $Amount; if ($amount > 0) {$revenue +=$amount} else {$expenditure +=$amount;} $card_tip =$card_hash{$CardId}; $card_tooltip = qq~$CardId ~; if ($card_tip eq "") { $card_tooltip = "$CardId"}; $terminal_tip =$terminal_hash{$TerminalId}; $terminal_tooltip = qq~$TerminalId ~; if ($terminal_tip eq "") { $terminal_tooltip = "$TerminalId"}; $revenue = sprintf("%.2f", $revenue); $expenditure = sprintf("%.2f", $expenditure); $billing_total = $revenue + $expenditure; $billing_total = sprintf("%.2f", $billing_total); $Amount = sprintf("%.2f", $Amount); $Amount =~ s/\./\,/; print<$dubravica_Day HTML } # End of foreach loop. $revenue =~ s/\./\,/g; $expenditure =~ s/\./\,/g; $billing_total=~ s/\./\,/g; print<
TimeStamp TerminalId CardId Amount
$TimeStamp $terminal_tooltip $card_tooltip $Amount
Ukupno sakupljeno bodova $revenue
Ukupno potrošeno bodova $expenditure
Grand Total $billing_total
HTML # End of display loop $daily_revenue = sprintf("%.2f", $daily_revenue); $daily_expenditure = sprintf("%.2f", $daily_expenditure); if ($button_text eq "Modify Record") { print " "; }; $which_search = $choose; &next_page_buttons($rows_left_to_view); print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "

"; } # End of billing_results subroutine. ############ Print Next Page Buttons ########################### sub next_page_buttons { if ($rows_left_to_view > 0 && $show ne "no") { print "

\n"; print ""; if ($rows_left_to_view == 1){ print< HTML }; if ($rows_left_to_view <= $max_rows_returned){ print< HTML }; if ($rows_left_to_view > $max_rows_returned) { print< HTML } ; } }