#!/usr/bin/perl
#
#
#######################################################
#		Access Denied version 1.1
#
#     		Created by: Solution Scripts 
# 		Email: solutions@solutionscripts.com
#		Web: http://solutionscripts.com
#
#######################################################
#
#
# COPYRIGHT NOTICE:
#
# Copyright 1999 Solution Scripts  All Rights Reserved.
#
# This program is being distributed as freeware.  It may be used and
# modified free of charge, so long as this copyright notice, the header 
# above and all the footers in the program that give me credit remain 
# intact. Please also send me an email, and let me know 
# where you are using this script. 
#
# By using this program you agree to indemnify Solution Scripts from any liability.
#
# Selling the code for this program without prior written consent is
# expressly forbidden.  Obtain permission before redistributing this
# program over the Internet or in any other medium.  In all cases
# copyright and header must remain intact.
#
######################################################
#
#

$protect{'Test 1'} = "/www/htdocs/vault/access_denied/.htpasswd";

$protect{'Test 2'} = "/www/htdocs/vault/access_denied/.htpasswd1";
# Full path password file ....... including file name

# THATS ALL FOLKS..................
########################################################

$thisurl = $ENV{'SCRIPT_NAME'};
$use_password = 0;


read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});
@pairs = split(/&/, $buffer);
foreach $pair (@pairs) {
	($name, $value) = split(/=/, $pair);
	$value =~ tr/+/ /;
	$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
	if ($INPUT{$name}) { $INPUT{$name} = $INPUT{$name}.",".$value; }
	else { $INPUT{$name} = $value; }
}

@passset = ('a'..'z');
for ($i = 0; $i < 2; $i++) {
	$randum_num = int(rand($#passset + 1));
	$salt .= @passset[$randum_num];
}


print "Content-type: text/html \n\n";

&set_defaults;
&Top;

if ($INPUT{'add'}) { &add; }
elsif ($INPUT{'remove'}) { &remove; }
elsif ($INPUT{'newpass'}) { &newpass; }
elsif ($INPUT{'delete_select'}) { &delete_select; }
elsif ($INPUT{'delete_final'}) { &delete_final; }
else { &admin; }
exit;

sub admin {

open (PASSWORD, "password.html");
$password = <PASSWORD>;
close (PASSWORD);

chop ($password);

unless ($password || $use_password) {
	print"<table cellspacing =1 bgcolor =\#00416B border=0 cellpadding =3 width=500>";
	print"<TR bgcolor=\#E4E4E4 align=center><TD><FONT FACE=\"$font_face\" size=$font_size>";
	print"Before you can do anything else, ";
	print"you'll need to set your administrative password. ";
	print"This will allow you to use the administrative functions, ";
	print"<HR noshade size=1 width=85%>";
	print"Please enter your desired password below. ";
	print"(Enter it twice.)</font></TD></TR></TABLE><BR>";
	print"<FORM METHOD=POST ACTION=http://www.fortunecity.com/business/busfive/360/$thisurl>\n";
	print"<P><CENTER><INPUT TYPE=SUBMIT NAME=newpass ";
	print"VALUE=\"Set Admin Password:\"> ";
	print"<INPUT TYPE=PASSWORD NAME=passad SIZE=10> ";
	print"<INPUT TYPE=PASSWORD NAME=passad2 SIZE=10>";
	print"</CENTER></P></FORM>";
	&Bottom;
	exit;
}

print <<EOF;

<form action="http://www.fortunecity.com/business/busfive/360/$thisurl" method=post>
<table cellspacing =0 bgcolor =$table_bg border=1 cellpadding =8>

<TR bgcolor=$table_head_bg align=center><TD colspan=3>
<FONT SIZE="$font_size" FACE="$font_face" color=$text_table_head><B>Add or remove logins</B>
</TD></TR>

<TR><TD><FONT SIZE="$font_size" FACE="$font_face" color="$text_table">
<B>Login: </B></TD><TD><input type=text name="login" size=25></TD>
<TD><FONT SIZE="$font_size" FACE="$font_face" color="$text_table"><B>Select Dir:</B> 
&nbsp;&nbsp;&nbsp;<select name="dir">
EOF

while (($key, $value) = each(%protect)) {
	print "<option value=\"$key\">$key\n ";
}
print <<EOF;
</SELECT></TD></TR>
<TR><TD><FONT SIZE="$font_size" FACE="$font_face" color="$text_table">
<B>Password: </B></TD><TD><input type=text name="pass" size=25></TD>
<TD><FONT SIZE="$font_size" FACE="$font_face" color="$text_table"><B>Use rules</B>:
&nbsp;&nbsp;&nbsp;<input type="Checkbox" name="rules" value="on" checked>
</TD></TR>
<TR><TD><FONT SIZE="$font_size" FACE="$font_face" color="$text_table">
<B>Retype: </B></TD><TD><input type=text name="pass2" size=25></TD></TR>
<TR bgcolor=$table_head_bg align=center><TD colspan=3><FONT SIZE="$font_size" FACE="$font_face">		
<INPUT TYPE="SUBMIT" NAME="add" VALUE=" Add Login ">
&nbsp;&nbsp;
<INPUT TYPE="SUBMIT" NAME="remove" VALUE=" Delete Login ">
&nbsp;&nbsp;
<INPUT TYPE="SUBMIT" NAME="delete_select" VALUE=" Delete Multiple ">
</TD></TR>
EOF
unless ($use_password) {
print <<EOF;
<TR bgcolor=$table_head_bg align=center><TD colspan=3><FONT SIZE="$font_size" FACE="$font_face" color=$text_table_head>		
<b>Enter Admin Password:</b>&nbsp;&nbsp;&nbsp;&nbsp;<input type="Text" name="password" size="15">
</TD></TR>
EOF
}
print "</TABLE>";
&Bottom;
exit;

}

##### SET NEW ADMIN PASSWORD ####
sub newpass {

unless ($INPUT{'passad'} eq $INPUT{'passad2'}) {
print <<EOF;
<table cellspacing =1 bgcolor =$table_bg border=0 cellpadding =8>
<TR align=center><TD><FONT SIZE="$font_size" FACE="$font_face" color=$text_table>
Your administrative password was 
not set, as the two entries were different!</TD></TR></TABLE>
EOF
&Bottom;
exit;
}

if ($INPUT{'passad'}) {
	$newpassword = crypt($INPUT{'passad'}, $salt);
}
else {
print <<EOF;
<table cellspacing =1 bgcolor =$table_bg border=0 cellpadding =8>
<TR align=center><TD><FONT SIZE="$font_size" FACE="$font_face" color=$text_table>
You must enter a password!</TD></TR></TABLE>
EOF
&Bottom;
exit;
}

unless ( -e "password.txt" ) { 
	open (PASSWORD, ">password.txt")|| &error("Error setting Password");;
	print PASSWORD "$newpassword";
	close (PASSWORD);
}
else {
print <<EOF;
<table cellspacing =1 bgcolor =$table_bg border=0 cellpadding =8>
<TR align=center><TD><FONT SIZE="$font_size" FACE="$font_face" color=$text_table>
Error setting your admin password<BR><BR>A password.txt file was found in this dir.<BR><BR>
Due to security reasons, it will not be overwritten.</TD></TR></TABLE>
EOF
&Bottom;
exit;
}

print <<EOF;
<table cellspacing =1 bgcolor =$table_bg border=0 cellpadding =8>
<TR align=center><TD><FONT SIZE="$font_size" FACE="$font_face" color=$text_table>
Your administrative password has been set.</TD></TR></TABLE>
EOF
&admin;
exit;
}

#### ADD A NEW PASSWORD ####
sub add {
&checkpassword;

$err = '';
unless ($INPUT{'login'})   { 
	$err .= "You have not entered a login, please go back an try again";
}
unless ($INPUT{'pass'} eq $INPUT{'pass2'}) {
	$err .= "The two passwords you entered must be the same<br>\n";
	}
if ($INPUT{'rules'}) {
	if ($INPUT{'pass'} eq $INPUT{'login'}) {
		$err .= "The login and password can not be the same";
	}
	@out = split(//,$INPUT{'login'});
	$a=0;
	foreach $char (@out) {
		$a++;
		unless ($char =~ /[A-Za-z0-9]/) {
			$err .= "Invalid login character -- $char<BR>";
		}
	}
	if ($a < 3 || $a > 12) {
		$err .= "Login is too long or short<BR>";
	}

	@out = split(//,$INPUT{'pass'});
	$a=0;
	foreach $char (@out) {
		$a++;
		unless ($char =~ /[A-Za-z0-9]/) {
			$err .= "Invalid Password character -- $char<BR>";
		}
	}
	if ($a < 5 || $a > 12) {
		$err .= "Password is too long or short<BR>";
	}	

}

if ($err) {
print <<EOF;
<table cellspacing =1 bgcolor =$table_bg border=0 cellpadding =8>
<TR align=center><TD><FONT SIZE="$font_size" FACE="$font_face" color=$text_table>
<B>Error setting login/password</b><BR><BR>
$err
<BR><BR>
To set the password as-is, be sure to uncheck the rules box.
</TD></TR></TABLE>
EOF
&Bottom;
exit;
}

$password = crypt($INPUT{'pass'}, $salt);

open(LIST,"$protect{$INPUT{'dir'}}");
@addresses=<LIST>;
close(LIST);

foreach $line(@addresses) {
	@login = split(/\:/,$line);
	if ($login[0] eq $INPUT{'login'}) {
print <<EOF;
<table cellspacing =1 bgcolor =$table_bg border=0 cellpadding =8>
<TR align=center><TD><FONT SIZE="$font_size" FACE="$font_face" color=$text_table>
The login you entered, <b>$INPUT{'login'}</b> is already exists in the $INPUT{'dir'} directory,
therefore was not set.
</font></td></TR></TABLE>
EOF
		&Bottom;
		exit;
	}
}

open(LIST,">>$protect{$INPUT{'dir'}}") || &error("Unable to print to $protect{$INPUT{'dir'}}");
print LIST "$INPUT{'login'}:$password\n";
close(LIST);
print <<EOF;

<table cellspacing =1 bgcolor =$table_bg border=0 cellpadding =8>
<TR align=center><TD><FONT SIZE="$font_size" FACE="$font_face" color=$text_table>
The login <b>$INPUT{'login'}</b> was successfully added to the $INPUT{'dir'} directory
</font></td></TR></TABLE>
EOF
&admin;
exit;
}

#### REMOVE A PASSWORD ####
sub remove{

&checkpassword;

open(LIST,"$protect{$INPUT{'dir'}}");
@addresses=<LIST>;
close(LIST);

open(LIST,">$protect{$INPUT{'dir'}}") || &error("Unable to write to $protect{$INPUT{'dir'}}");
$found=0;
foreach $line (@addresses) {
	@login = split(/\:/,$line);
	if ($login[0] eq $INPUT{'loginn'}) {
		$found=1;
	}
	else {
		print LIST $line;
	}
}
close(LIST);

if ($found) {
print <<EOF;
<table cellspacing =0 bgcolor=$table_bg border=1 cellpadding =8>
<TR align=center><TD><FONT SIZE="$font_size" FACE="$font_face">
The login <b>$INPUT{'loginn'}</b> has been removed from the $INPUT{'dir'} directory
</font></td></TR></TABLE>
EOF
&admin;
exit;
}
else {
print <<EOF;
<table cellspacing =0 bgcolor=$table_bg border=1 cellpadding =8>
<TR align=center><TD><FONT SIZE="$font_size" FACE="$font_face">
The login <b>$INPUT{'loginn'}</b> has was not found in the $INPUT{'dir'} directory,
therefore not removed
</font></td></TR></TABLE>
EOF
&admin;
exit;
}

}


#### DELETE MULTIPLE ####
sub delete_select {
&checkpassword;

open(LIST,"$protect{$INPUT{'dir'}}") || &error("Can not open $protect{$INPUT{'dir'}} for reading");
@addresses=<LIST>;
close(LIST);
@addresses = sort {$a cmp $b} @addresses;

print <<EOF;
<font face=$font_arial size=$font_size>
<FORM METHOD=POST ACTION="http://www.fortunecity.com/business/busfive/360/$thisurl">
<input type="Hidden" name="dir" value="$INPUT{'dir'}">
<B>Select logins to delete from the $INPUT{'dir'} directory</B><br><br>
<table cellspacing=0 bgcolor=$table_bg border=1 cellpadding =3>
<TR align=left>


EOF
	
$num_email=0;
$color{'1'} = $alt1;
$color{'2'} = $alt2;
$colors=1;

foreach $line(@addresses) {
	chomp($line);
	@login = split(/\:/,$line);

	if ($num_email == 3) { 
		print "</TR><TR align=left>"; 
		$num_email=0;
	}
	print "<TD bgcolor=$color{$colors}><FONT SIZE=\"$font_size\" FACE=\"$font_face\" color=$text_table>";
	print "<INPUT TYPE=\"CHECKBOX\" NAME=\"delete\" VALUE=\"$line\"> -- $login[0]</TD>";
	$num_email++;
	if ($colors == 2) {
		$colors = 0;
	}
	$colors++;
}
print <<EOF;
</TD></TR>
<TR bgcolor=$table_head_bg align=center><TD colspan=3><FONT SIZE="$font_size" FACE="$font_face" color=$text_table_head>
EOF
unless ($use_password) {
print <<EOF;
<B>Enter your admin password:</B>&nbsp;&nbsp;&nbsp;&nbsp;
<input type=password name="password" size=20>
<BR>
EOF
}
print <<EOF;
<INPUT TYPE="SUBMIT" NAME="delete_final" VALUE="Delete these logins">
</TD></TR></TABLE>
</form>
EOF
&Bottom;
exit;	
}	

#### DELETE MULITIPLEVLOGIN ####
sub delete_final {
&checkpassword;

open(LIST,"$protect{$INPUT{'dir'}}")|| &error("Unable to open $protect{$INPUT{'dir'}}");
@addresses=<LIST>;
close(LIST);
print <<EOF;

<table cellspacing=0 bgcolor=$table_bg border=1 cellpadding=8 width=400>
<TR align=center>
<TD><FONT SIZE="$font_size" FACE="$font_face" color=$text_table>
The following logins were deleted from the $INPUT{'dir'} directory<BR><BR>
EOF

@deleting = split(/\,/,$INPUT{'delete'});
foreach $line(@deleting) {
	@addresses = grep{ !(/$line/i) } @addresses;
	@login = split(/\:/,$line);
	print "$login[0] <BR>";
}

print <<EOF;
</TD></TR></TABLE>
EOF

open(LIST,">$protect{$INPUT{'dir'}}") || &error("Unable to write to $protect{$INPUT{'dir'}}");
print LIST @addresses;
close(LIST);

&admin;
exit;
}

#### CHECK PASSWORD ####
sub checkpassword {

unless ($use_password) {

	open (PASSWORD, "password.txt") || &error("Unable to open password.txt");
	$password = <PASSWORD>; 
	close (PASSWORD);

	if ($INPUT{'password'}) {
		$newpassword = crypt($INPUT{'password'}, $password);
		unless ($newpassword eq $password) {
print <<EOF;
<table cellspacing =0 bgcolor =$table_bg border=1 cellpadding =8>
<TR align=center><TD><FONT SIZE="$font_size" FACE="$font_face" color=$text_table>Wrong Password 
</TD></TR></TABLE>
EOF
			&Bottom;
			exit;
		}
	}
	else {
print <<EOF;
<table cellspacing =0 bgcolor =$table_bg border=1 cellpadding =8>
<TR align=center><TD><FONT SIZE="$font_size" FACE="$font_face" color=$text_table>You must enter your admin password
</TD></TR></TABLE>
EOF
		&Bottom;
		exit;
	}
}
}

#### PRINT TOP ####
sub Top {
print <<EOF;
<HTML>
<!-- ARCHIVE by FORTUNECITY.ws -->
<HEAD><TITLE>Access Denied -- Solution Scripts</TITLE></HEAD>
<BODY 
 BGCOLOR="$bg_color" TEXT="$text_color" link=$link_color vlink=$link_color alink=$link_color><script>
  (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
  (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
  m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
  })(window,document,'script','//www.google-analytics.com/analytics.js','ga');

  ga('create', 'UA-47423994-1', 'fortunecity.ws');
  ga('send', 'pageview');

</script>
<center>
<br>
	
	<div>	
<script language="javascript" type="text/javascript" src="http://ad.broadcaststation.net/ads/show_ad.php?width=728&height=90"></script>
	</div>
</center>

<center>


<br>
<div style="height:5px"></div>
</center>



<CENTER>
<table cellspacing=0 bgcolor =$table_bg border=1 cellpadding =10>
<TR align=center><TD>
<FONT FACE="$font_face" size=3 color=$text_table>
<B>Access Denied</B></FONT></TD></TR></TABLE>
<BR><BR>
EOF
}

#### BOTTOM ####
sub Bottom {
print <<EOF;
<BR><BR>
<table cellspacing=0 bgcolor =$table_bg border=1 cellpadding =10>
<TR align=center><TD>
<FONT FACE="$font_face" size=$font_size color=$text_table>
<A HREF="http://solutionscripts.com/">Acess Denied v1.1</A><br>Free from <A HREF="http://solutionscripts.com/">Solution Scripts</A></TD></TR></TABLE>
</FONT
</BODY>
<!-- ARCHIVE by FORTUNECITY.ws -->
<center>

  <div>
<br>
<script language="javascript" type="text/javascript" src="http://ad.broadcaststation.net/ads/show_ad.php?width=300&height=250&cache=0"></script>
<script language="javascript" type="text/javascript" src="http://ad.broadcaststation.net/ads/show_ad.php?width=300&height=250"></script>
        </div>
<br>
<br>

</center>
</HTML>
EOF
}

#### ERROR ####
sub error{
$errors = $_[0] ;
print <<EOF;
<table cellspacing=0 bgcolor =$table_bg border=1 cellpadding =10 width=400>
<TR align=center><TD>
<FONT FACE="$font_face" size=$font_size color=$text_table>
<B>An error has occured</B><BR><BR>
The error is: <font color=$text_highlight>$errors</font><br><br>
<font color=$text_highlight>$!</FONT>
<BR><BR>
If you are having troubles running Access Denied, please come visit
<a href="http://solutionscripts.com/">http://solutionscripts.com</a> where we have both
a Help Forum and a F.A.Q. setup to help you get over your troubles.
</TD></TR></TABLE>
EOF
&Bottom;
exit;
}

#### SET DEFAULT COLORS ##
sub set_defaults {

$over_bg= "white";
$table_bg= "slateblue";
$table_head_bg= "MediumBlue";
$text_color= "black";
$link_color= "orange";
$text_table= "white";
$text_table_head= "white"; 
$text_highlight= "red"; 
$font_face= "$font_face";
$font_size= "2"; 
$alt1= "MediumSlateBlue"; 
$alt2= "SlateBlue"; 

}