#!/usr/bin/perl
##############################################
##                                          ##
##  PROFILE MANAGER BASIC 3.0               ##
##  Build 2005-10-20                        ##
##                                          ##
##  Interlogy LLC.                          ##
##  email: contact@interlogy.com            ##
##  http://www.interlogy.com/products/pmb   ##
##                                          ##
##  Copyright 1999-2005 Interlogy LLC.      ##
##                                          ##
##############################################



 ###############################
 # find the root if this is IIS:
 ###############################
 if($ENV{'SERVER_SOFTWARE'} =~ m/IIS/)
 {
        if($root eq "" && $ENV{'PATH_TRANSLATED'} ne "")
        {
                my $pt = $ENV{'PATH_TRANSLATED'};
                my @pts = split(/\\/, $pt);
                $pts[-1] = "";
		if($ENV{'PATH_INFO'} eq "/pm.xls"){
			$pts[-2] = "";
		}
                $root = join "/", @pts;
		$root =~ s/\/\//\//;
		$OS = "NT";
        }
 }



require "${root}lib/pm.lib"; 
require "${root}lib/admin.lib"; 
require "${root}data/config/pmpre.cfg";
$strip_html = "no";
$iamadmin = 1;
$no_strip_pipe = 1;
&readit;

if($input{'realaction'} ne ""){
	$input{'action'} = $input{'realaction'};
}

if($input{'adminpass'} ne ""){
	$input{'pass'} = pm_encode($input{'adminpass'});
}

if($input{'pass'} eq ""){
    $input{'pass'} = $req->cookie("pmadm");
}

if($input{'action'} eq "admin_menu"){
           my $packed_cookie = $req->cookie(
                                        -NAME           => "pmadm",
                                        -VALUE          => $input{'pass'},
                                        -EXPIRES        => "+7d",
                                        -PATH           => "/"
            );
            print $req->header(-COOKIE => $packed_cookie);
            $header_set = 1;
}elsif($input{'action'} eq "logout"){
           my $packed_cookie = $req->cookie(
                                        -NAME           => "pmadm",
                                        -VALUE          => "byebye",
                                        -EXPIRES        => "-1h",
                                        -PATH           => "/"
            );
            print $req->header(-COOKIE => $packed_cookie);
            $header_set = 1;
	    $input{'action'} = "admin_logout";
	    &tempwiz;
	    exit;
}else{
	print "Content-type: text/html\n\n" 
		unless ($input{'action'} eq "exported" && $input{'format'} eq "excel");
}

$admin_pass_file = "${root}$admin_pass_file";
if(&admin_pass_check ne "yes")
{
	if($input{'pass'} ne ""){
		print "<center><font size=1 face=arial color=red>You can reset your password by deleting admin.pass file manually</font></center>";
	}	
	$input{'action'} = "admin"; 
	&tempwiz; 
	exit;
} else {
	$admin_checked=1; 
}

#tempwiz('adminheader');


if( $input{'action'} eq "users" )
	{ &users; }
elsif( $input{'action'} eq "message" )
	{ $input{'from'} = $admin; &tempwiz; }
elsif( $input{'action'} eq "messanger" )
	{ &messanger($database); }
elsif( $input{'action'} eq "deleted_user" )
	{ &remove_row; $input{'action'}="users"; &users; }
elsif( $input{'action'} eq "backup" )
	{ &backup_list; &tempwiz("backup"); &admin_end; }
elsif( $input{'action'} eq "backedup" )
	{ &backup; &backup_list; $input{'action'}="backup"; &tempwiz; &admin_end; }
elsif( $input{'action'} eq "retrieve" )
	{ &retrieve; &backup_list; $input{'action'}="backup"; &tempwiz; &admin_end; }
elsif( $input{'action'} eq "export" ){ 
	&export; &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "exported" ){ 
	&exported; &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "mass_add" ){ 
	$values{'list fields'} = join(", ", @base)."\n"; 
	$values{'list required fields'} = join("|", @not_null); 
	&tempwiz; &admin_end;  
}
elsif( $input{'action'} eq "mass_added" ){ 
	&mass_added; &tempwiz; &admin_end;  
}
elsif( $input{'action'} eq "support" ){ 
	&fetch_support; &tempwiz; &admin_end;  
}
elsif( $input{'action'} eq "forum" ){ 
	&fetch_forum; &tempwiz; &admin_end;  
}
elsif( $input{'action'} eq "latest_versions" ){ 
	&fetch_latest_versions; &tempwiz; &admin_end;  
}
elsif( $input{'action'} eq "change_pass" )
	{ &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "changed_pass" )
	{ 
		&admin_pass_change; 
		$input{'pass'} = pm_encode($input{'pass1'}); 
		$values{'pass'} = $input{'pass'}; 
		&tempwiz("admin"); &admin_end;  }
elsif( $input{'action'} eq "approval")
	{ &approval; &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "approveall")
	{ &approveall; &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "rebuild_static_profiles")
	{ &rebuild_static_profiles; exit;  }
elsif( $input{'action'} eq "tempfind")
	{ &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "tempfind_results")
	{ &tempfind_results; &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "massedit")
	{ &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "massedited")
	{ &massedited; &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "edittemp")
	{ &edittemp; &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "stats" )
	{ &show_stats; &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "tracking" )
	{ &show_tracking; &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "env" )
	{ &show_env; &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "search_stats" )
	{ &show_search_stats; &tempwiz; &admin_end;  }
elsif( $input{'action'} eq "paymentlog" )
	{ &show_paymentlog; &tempwiz; &admin_end;  }
else
	{ &admin_menu; $input{'action'} = "admin_menu"; &tempwiz; &admin_end; }
	

&admin_end; 

sub errdie{
	($em) = @_;
	print "Terminating Error: $em";
	exit;
}

sub admin_menu
{
	&time_n_ID;
	$now = $sortabledate;

	$input{'new today'} = 0;
	$input{'update today'} = 0;
	$input{'new week'} = 0;
	$input{'update week'} = 0;
	$input{'new month'} = 0;
	$input{'update month'} = 0;
	$input{'unapproved'} = 0;

	open (DATABASE, "<${root}$database");
	my @lines = <DATABASE>;
	close (DATABASE);

        open(H, "<$content_pass_file") or errdie "Cannot open htpassword file: $!";
        while(my $l = <H>){
                my ($lo) = split(/\:/, $l);
                $hlogins .= "|${lo}|";
        } 
        close(H);


	foreach my $line(@lines)
	{
		my $ok = 1;
		my $i = 0;
		my @results = ();
		init($line);
		if($values{'sortable_register_date'} eq $now){
			$input{'new today'}++;
		}
		for($i=0; $i<=$wday; $i++){
			if($values{'sortable_register_date'} eq $now-$i){
				$input{'new week'}++;
			}
			if($values{'sortable_update_date'} eq $now-$i){
				$input{'update week'}++;
			}
		}
		for($i=0; $i<=$day; $i++){
			if($values{'sortable_register_date'} eq $now-$i){
				$input{'new month'}++;
			}
			if($values{'sortable_update_date'} eq $now-$i){
				$input{'update month'}++;
			}
		}

		if($hlogins !~ m/\|$values{'login'}\|/){
			$input{'unapproved'}++;
		}
	}

        my $nolines = 0;
        my $end = $start + $perpage;
        $today = &get_this_yearday;

	my @statz = ();
	&get_time;
	$sno = substr($stat_no, 0, 7);
	open (STAT, "<${root}$stat_file");
	while (($line = <STAT>))
	{      push (@statz, $line); }
	close STAT;
	
	my %lin = ();
	foreach(reverse @statz){
		my ($s, $em, $l) = split(/\|/, $_);
		if($sno == substr($s, 0, 7)){
			$lin{$l} = 1;
		}
	}
	$input{'logged today'} = keys %lin;
	&show_env
}


sub admin_end{
   #tempwiz('adminfooter');
   exit;
}

sub fetch_support
{
	my $text = "";
	my $name = "";
	if($input{'text'} ne ""){
		$text = "Just Reporting: Documentation+of+$input{'text'}+variable+is+not+clear.";
	}
	if($ENV{'HTTP_HOST'} ne "" && $ENV{'HTTP_HOST'} ne "localhost"){
		$name = "$ENV{'HTTP_HOST'}";
	}
	#- fetch support form from interlogy site:
	eval("use LWP::Simple");
	$f = $from;
	$f =~ s/\@/\\\@/;
	eval("\$input{'out'} = get(\"http://www.interlogy.com/about/pmb  _support.html?text=$text&email=$f&name=$name\") ");
}

sub fetch_forum
{
	#- fetch support forum list from interlogy site:
	eval("use LWP::Simple");
	eval("\$input{'out'} = get(\"http://www.interlogy.com/support/pmb  /board/latest_bare.php\")");
}

sub fetch_latest_versions
{
	#- fetch support forum list from interlogy site:
	eval("use LWP::Simple");
	eval("\$input{'out'} = get(\"http://www.interlogy.com/products/pmb  /latest_bare.html\")");
}

sub exported
{
	my $allrows = 1;
	@fields = ();
	my @checks = ();

		


	#- find out what the form says
	foreach (keys %input){
		my $v = $input{$_};
		if(m/only(\d)_field/){
			if($v ne ""){
				my $t = "only$1_text";
				$checks{$v} = $input{$t};
				$allrows = 0;
			}
		}elsif(m/field_(.*)/){
			push(@fields, $1);
		}
	}

	#- remember last time
	my $last_checked = "";
	foreach(@fields){
		$last_checked .= "document.forms[0].field_$_.checked = true;\n";
	}
	open (RLC, ">${root}data/tmp/export_last_checked.js");
	print RLC $last_checked;
	close(RLC);

	#- fix the order
	my @temp = ();
	foreach my $b( @base ){
		foreach my $f( @fields ){
			if($b eq $f){
				push(@temp, $b);
			}
		}	
	}
	@fields = @temp;

	if($input{'format'} eq "excel"){
		eval(" require \"${root}lib/excel.lib\"; ");
		exit;
	}

	#- first line
	my $out = "";
	if($input{'firstline_names'} eq "yes"){
		if($input{'format'} eq "csv"){
			$out .= join ",", map { "\"$_\"" } @fields;
		}else{
			$out .= join($input{'delimiter'}, @fields);
		}
		$out .= "\n";
	}

	#- create the export list
	open (DATABASE, "<${root}$database");
	while(my $line = <DATABASE>)
	{
		my $ok = 1;
		my $i = 0;
		my @results = ();
		init($line);
		my $d = $input{'delimiter'};
		if($input{'format'} eq "csv"){
			$d = ",";
		}
		foreach(keys %values){
			$values{$_} =~ s/\Q$d\E/ /g;
			if($input{'format'} eq "csv"){
				$values{$_} =~ s/\"/\'/g;
			}
		}
		if($allrows){
			foreach(@fields){
				$results[$i++] = $values{$_};
			}	
		}else{
			foreach my $c(keys %checks){
				if($values{$c} ne $checks{$c}){
					$ok = 0;
				} 
			}
			if($ok){
				foreach(@fields){
					$results[$i++] = $values{$_};
				}	
			}
		}
		if( $ok ){
			my $newline = "";
			if($input{'format'} eq "csv"){
				$newline = join ",", map { "\"$_\"" } @results;
			}else{
				$newline = join($input{'delimiter'}, @results);
			}
			if($input{'remove_duplicates'} eq "yes"){
				foreach( split("\n", $out) ){
					$ok = 0 if($_ eq $newline);
				}
			}
			if( $ok ){
				$out .= "$newline\n";
			}
		}
	}
	close DATABASE;

	if($out eq ""){
		$input{'export_list'} = "Sorry, no results found!";
	}else{
		$input{'export_list'} = $out; 		
	}

}

sub export
{
	my $size = int((@base)/4);
	my $i = 0;
	$input{'base_checkbox'} = "\n\n<table border=0 valign=top><tr><td valign=top>";
	$input{'base_dropdown'} = "<option> </option>";
	foreach(@base){
		$input{'base_dropdown'} .= "<option>$_</option>";
		if($size == $i++){
			$input{'base_checkbox'} .= "\n</td><td valign=top>\n";
			$i=0;
		}
		$input{'base_checkbox'} .= "<input type=checkbox name=\"field_$_\" value=yes>
				<font size=2 face=Arial>$_</font><br>";
	}
	$input{'base_checkbox'} .= "\n\n</td></tr></table>";

	open (RLC, "<${root}data/tmp/export_last_checked.js");
	$input{'last_checked'} = join(" ", <RLC>);
	close (RLC);  
	if($input{'last_checked'} eq ""){
		foreach(@not_null){
			$input{'last_checked'} .= "document.forms[0].field_$_.checked = true;\n"
				unless($_ eq "password");
		}
	}

	eval("use Spreadsheet::WriteExcel");
        if ($@) {
		$input{'excel_warning'} = "<font color=red size=1>(Spreadsheet::WriteExcel is not installed!)</font>";
        } else {
		$input{'excel_warning'} = "<!-- no problem -->";
        }

}

sub mass_added{

	#- check for the unwanted windows character:
	$input{'data'} =~ s/\r/\n/g;
	$input{'data'} =~ s/\n\n/\n/g;

	my($fields, @rows) = split("\n", $input{'data'});
	$input{'data'} = ""; #- free the memory
	$d = $input{'delimeter'}; 
	$d = "|" if($d eq "");
	$d =~ s/(\W)/\\$1/g;
	my(@fields) = split(/$d/, $fields);

	#print "<font color=navy>$fields</font><br>";
	#print "<font color=red>@rows</font>";

	#- check the first line
	#- it should include required fields 
	my $fc = 0;
	foreach $f(@fields){
		if($f eq "login"){
			$login_field = $fc;
		} elsif($f eq "ID"){
			$ID_field = $fc;
		} elsif($f eq "email"){
			$email_field = $fc;
		} elsif($f eq "register_date"){
			$register_date_field = $fc;
		} elsif($f eq "update_date"){
			$update_date_field = $fc;
		} elsif($f eq "sortable_register_date"){
			$sortable_register_date_field = $fc;
		} elsif($f eq "sortable_update_date"){
			$sortable_update_date_field = $fc;
		}
		foreach $nn(@not_null){
			if($nn eq $f){
				$foundnn{$nn} = $fc;
			}
		}
		$fc++;	
	}
	if($ID_field<1){ $fields[$fc] = "ID"; $ID_field = $fc++; }
	if($email_field<1){ $fields[$fc] = "email"; $email_field = $fc++; }
	if($register_date_field<1){ $fields[$fc] = "register_date"; $register_date_field = $fc++; }
	if($update_date_field<1){ $fields[$fc] = "update_date"; $update_date_field = $fc++; }
	if($sortable_register_date_field<1){ $fields[$fc] = "sortable_register_date"; $sortable_register_date_field = $fc++; }
	if($sortable_update_date_field<1){ $fields[$fc] = "sortable_update_date"; $sortable_update_date_field = $fc++; }

	foreach(@not_null){
		if($foundnn{$_} eq ""){
			$problem_fatal .= "<br>$_ is a required field and it is missing"
				unless($_ eq "ID" || $_ eq "password"); 
		}
	}
	
	#- check the login field format
	&get_existing_logins;
	foreach(@rows){
		#- todo: changed brakes back to normal
		#my(@ea) = split(/\|/, $_);
		my(@ea) = split(/$d/, $_);
		my $login = $ea[$login_field];
		if ($login =~ /[^A-Za-z0-9_-]/) {
			$rejected{$login} = "Login field should only include alphanumeric chracters!";
			next;
		}

		#- check the login if already exists
		if($existing_logins{$login} == 1){
			$rejected{$login} = "Login already exists in the database!";
			next;
		}elsif($existing_logins{$login} == 2){
			$rejected{$login} = "Duplicate entry!";
			next;
		}else{
			$existing_logins{$login} = 2;
		}
		
		#- check required fields
		my $r = 0;
		foreach(keys %foundnn){
			my $fc = $foundnn{$_};
			if($ea[$fc] eq "" || $ea[$fc] eq " "){
				$rejected{$login} .= "Required field $_ is missing! ";
				$r = 1;
			}
		}
		if($r){
			next;
		}

		#- check the email field format
                if( $check_email eq "yes")
                {
                        if($email_field ne ""){
                                if(!($ea[$email_field] =~ m/^([\w\-\.\!\%\+]+\@[a-zA-Z0-9\-]+(\.[a-zA-Z0-9\-]+)*\.[a-zA-Z0-9\-]+)$/)){
                                        $rejected{$login} = "Email format is not correct! ($ea[$email_field])";
                                        next;
                                }
                        }
                }

		#- create the dates and IDs
		&time_n_ID;
		if($ea[$register_date_field] eq ""){
			$ea[$register_date_field] = $today;
		}
		if($ea[$update_date_field] eq ""){
			$ea[$update_date_field] = $today;
		}
		if($ea[$sortable_register_date_field] eq ""){
			$ea[$sortable_register_date_field] = $sortabledate;
		}
		if($ea[$sortable_update_date_field] eq ""){
			$ea[$sortable_update_date_field] = $sortabledate;
		}
		if($ea[$ID_field] < 10){
			$ea[$ID_field]=$ID;
		}

		#for($i=0; $i<@ea; $i++){
		#	print "($i=$fields[$i]=$ea[$i])"; 
		#}	
		my %fea;
		for($i=0; $i<@fields; $i++){
			$fea{$fields[$i]} = $ea[$i];
		}
		my @bfea;
		foreach(@base){
			if($fea{$_} eq ""){
				$fea{$_} = " ";
			} 
			push(@bfea, $fea{$_});	
		}	
		$accepted .= join("|", @bfea)."\n";

	}

	#- put accested lines and other warnings into variables
	$input{'rejected'} = "    ";
	foreach(keys %rejected){
		$input{'rejected'} .= "<li>Rejected <b>$_</b>: $rejected{$_}";
	}

	#- if complete, give a success page
	if($input{'submit'} eq "Complete" && $problem_fatal eq ""){
		$input{'out'} = "The new users have been successfully added to the database!"; 	
		open (DATABASE, ">>${root}$database");
		print DATABASE ${accepted};
		close(DATABASE);

		return;
	}

	#- add to accepted lines
	$input{'out'} = "
		<form action=admin.cgi method=post>
		<input type=hidden name=action value=mass_added>
		<input type=hidden name=pass value=$input{'pass'}>
		<p><textarea name=data cols=100 rows=20 wrap=off>".join("|", @base)."\n"."${accepted}</textarea><br>
		<input type=submit name=submit value=Preview>
	";
	if($problem_fatal eq ""){
		$input{'out'} .= "\n <input type=submit name=submit value=Complete>";		
	}else{
		$input{'out'} .= "\n <font color=red><b>Fatal problem!</b>$problem_fatal</font>";
	}

}

sub get_existing_logins{
 open (DATABASE, "<${root}$database");
 while(<DATABASE>)
 {
	 if (m/^(.*?)\|/){
		$existing_logins{$1} = 1;
	 }
 }
 close DATABASE;
}

sub show_env{

	my $type = "Apache";
	if($ENV{'SERVER_SOFTWARE'} =~ m/IIS/){
		$type = "Windows IIS";
	}
	#$values{'env'} = "\n\n<center><font size=2 face=\"Verdana,Arial\" color=navy><b>Server Environment Variables:
	#			</b></font></center><p>\n";
	$values{'env'} .= "\n\n<table>\n";
	$values{'env'} .= "\n\n<tr><td>Server Type:</td><td>$type</td></tr>\n";
	$values{'env'} .= "\n\n<tr><td>Sendmail Locations:</td><td>\n";
	$values{'env'} .= `whereis sendmail`;
	$values{'env'} .= "\n\n</td></tr><tr><td>Default Sendmail Location:</td><td>\n";
	$values{'env'} .= `which sendmail`;
	$values{'env'} .= "\n\n</td></tr>";
	$values{'env'} .= "\n\n<tr><td>Image::Magick Installed?</td><td>\n";
	eval("use Image::Magick");
	if ($@) { 
		$values{'env'} .= "no";
	} else {
		$values{'env'} .= "yes";
	}
	$values{'env'} .= "\n\n</td></tr>";
	$values{'env'} .= "\n\n<tr><td><br>Environment Variables:</td><td>\n";
	$values{'env'} .= "\n\n</td></tr>";
	foreach (keys %ENV){
		$values{'env'} .= "\n<tr>\n";
		my $envline = $ENV{$_};
		$envline =~ s/\,/\, /g;
		
	       $values{'env'} .= "<td>$_:</td> <td width=300>$envline</td>\n";
		$values{'env'} .= "\n</tr>\n";
	}

	$values{'env'} .= "\n\n</table>\n";
}

sub approval{
	
        if($input{'waiting'} ne ""){
                open(H, "<$content_pass_file") or errdie "Cannot open htpassword file: $!\n";
                @lines = <H>;               
                close H;                    

                my $encrypted = crypt($input{$input{'waiting'}}, $encrypt_addon);
                push(@lines, "$input{'waiting'}:$encrypted\n");

                open(H, ">$content_pass_file") or errdie "Cannot open htpassword file: : $!";
                print H @lines;
                close H;

			#- approved email
			if($input{'send_email'} eq "yes" && $send_confirmation eq "yes"){
				 open (DATABASE, "<${root}$database");
	 			 while ($thisrow = <DATABASE>){
  					if ($thisrow =~ m/^$input{'waiting'}\|(.*)/){
   						&init($thisrow);
					}
				 }
	 			 close DATABASE;
				 $values{'awaiting'} .= "<center><font color=green size=1 face=arial>sending email to $values{'email'}...</font></center>";
				 &confirm_approval;
			}
			elsif($input{'send_email'} eq "yes" && $send_confirmation ne "yes"){
				$values{'awaiting'} .= "not sending email, because send_confirmation is disabled 
						in pmpre configuration";
			}

        }

        if($input{'approved'} ne ""){
                #-
                open(H, "<$content_pass_file") or errdie "Cannot open htpassword file: $!\n";
                @lines = <H>;
                close H;

                foreach(@lines){
                        if(!(m/^$input{'approved'}:/i)){
                                push(@newlines, $_);
                        }
                }  

                open(H, ">$content_pass_file") or errdie "Cannot open htpassword file: $!\n";
                print H @newlines;
                close H;

        }
        

        
        #- open .htpassword and get all logins
        open(H, "<$content_pass_file") or errdie "Cannot open htpassword file: $!";
        while(my $l = <H>){
                my ($lo) = split(/\:/, $l);
                $hlogins .= "|${lo}|";
        } 
        close(H);
        
        #- open database and get all logins
        open(D, "<${root}$database") or errdie "Cannot open database: $!";
        my @dlines = <D>;
        close(D);

        #- find the ones that don't exist in the htpass
        foreach(@dlines){
		    if($htaccess_use_id eq "no"){
    	                ($lgn, $dump, $didtemp) = split(/\|/, $_);
		    } else {
	                ($lgn, $didtemp) = split(/\|/, $_);
		    }
		    #$lgn = lc($lgn);
                $did{$lgn} = $didtemp;
                if($hlogins =~ m/\|${lgn}\|/){
                        push(@approved, $lgn);
                }else{
                        push(@waiting, $lgn);
                }
        }

	#- sort them
        @approved = sort @approved;
        @waiting = sort @waiting;

        #- list them
        $values{'awaiting'} .= "\n<form action=admin.cgi method=post>";
        $values{'awaiting'} .= "\n<input type=hidden name=pass value=\"$input{'pass'}\">";
        $values{'awaiting'} .= "\n<input type=hidden name=action value=approval>";
        $values{'awaiting'} .= "\n<table border=0><tr>";
        $values{'awaiting'} .= "<td cellpadding=10 cellspacing=10>";
        $values{'awaiting'} .= "<select size=20 name=waiting >";
        $values{'awaiting'} .= "\n<option value=>------- Waiting --------";
        foreach(@waiting){
                $values{'awaiting'} .= "\n<option value=\"$_\">$_";
        }
        $values{'awaiting'} .= "</select>";
        $values{'awaiting'} .= "</td><td cellpadding=10 cellspacing=10>";
        $values{'awaiting'} .= "<input type=submit name=do value=\"approve >>\"><br><br>";
        $values{'awaiting'} .= "<input type=submit name=do value=\"<< disapprove\">";
        $values{'awaiting'} .= "</td><td cellpadding=10 cellspacing=10>";
        $values{'awaiting'} .= "<select size=20 name=approved >";
        $values{'awaiting'} .= "\n<option value=>------- Approved --------";
        foreach(@approved){
                $values{'awaiting'} .= "\n<option value=\"$_\">$_";
        }
        $values{'awaiting'} .= "</select></td>";
        $values{'awaiting'} .= "</table>";
        foreach(@waiting){
                $values{'awaiting'} .= "\n<input type=hidden name=\"$_\" value=$did{$_}>";
        }
	$values{'awaiting'} .= "\n<input type=checkbox checked name=send_email value=yes> Send email to approved members<br>";
        $values{'awaiting'} .= "\n</form>";

	$values{'awaiting'} .= "<p><br>";
	$values{'awaiting'} .= "<a href=admin.cgi?action=approveall>Approve all waiting members.</a>";

}

{
        my $cf = $input{'changefrom'};
        my $ct = $input{'changeto'};
        my $no_of_tempz = keys %tempz;
        my $tout = "$no_of_tempz files are scanned...";
        foreach my $tn(keys %tempz){
                my $tf = $tempz{$tn};
                if( open(TEMPR, "<${root}$tf") ) {
                        my @arrtempfile = <TEMPR>;
                        #my $tempfile = join("", @arrtempfile);
                        close TEMPR;
                        my @newarrtempfile = ();
                        foreach my $line(@arrtempfile){
                                if($line =~ m/\Q${cf}/){
                                        $modifiedfiles{$tn} = $tf;
                                        $line =~ s/\Q${cf}/${ct}/g;
                                }
                                push(@newarrtempfile, $line);
                        }
                        open(TEMPW, ">${root}$tf") or print "Cannot open ${root}$tf for writing: $!\n<br>";
                        print TEMPW @newarrtempfile;
                        close TEMPW;
                        #open(TEMPW, ">/tmp/temp/$tn") or print $!;
                        #print TEMPW @newarrtempfile;
                        #close TEMPW;
                        #print "\ndiff /tmp/temp/$tn $tf";
                        #print `diff /tmp/temp/$tn $tf`;
                        #print "\n";
                } else { print "Cannot open ${root}$tf for reading: $!\n<br>"; }
        }

        $no_of_modifiedfiles = keys %modifiedfiles;
        if( $no_of_modifiedfiles < 1){
                $tout .= "<br>String not found on any of the files.";
        }else{
                $tout .= "<br>String has been replaced on $no_of_modifiedfiles files:<ul>";
                foreach(keys %modifiedfiles){
                        $tout .= "\n<li>$_ ($modifiedfiles{$_})";
                }
                $tout .= "</ul>\n\n";
        }
        $input{'output'} = $tout;
}

sub edittemp
{
	my $tout;
	if($input{'file'} ne ""){
		$tp = $tempz{$input{'file'}};
		if($tp ne "" && $input{'text'} ne "")
		{
			open(T, ">${root}$tp") or print "${root}$tp: $! (did you set the template files as writable?)<p>\n";
			print T $input{'text'};
			close T;
			$tout .= "<p>";
		}
	}

	$tout .= "\n\n\n<table border=0 cellpadding=0 cellspacing=0>
		<form method=get action=admin.cgi>
		<tr>
			<td colspan=2>";

	# create a drop down list from tempz array
	#- get addon folder list
	#- get profile folder list
	#- get member folder list
	#- get search folder list
	foreach(keys %tempz){
		my $t = $tempz{$_};
		if($t =~ m/templates\/addon/){
			push(@t_addon, $_);
		}elsif($t =~ m/templates\/common/){
			push(@t_common, $_);
		}elsif($t =~ m/templates\/member/){
			push(@t_member, $_);
		}elsif($t =~ m/templates\/profile/){
			push(@t_profile, $_);
		}elsif($t =~ m/templates\/search/){
			push(@t_search, $_);
		}elsif($t =~ m/templates\/admin/){
			push(@t_admin, $_);
		}else{
			push(@t_other, $_);
		}
	}

	$tout .= "<input type=hidden name=pass value=$input{'pass'}>";
	$tout .= "<input type=hidden name=action value=edittemp>";

	$tout .= "<select name=nexttemp>";

	$tout .= "<option>---select a template---\n";

	$tout .= "<option>\n";

	$tout .= "<option>---common---------------\n";
	foreach(sort @t_common){
		if($input{'nexttemp'} eq $_){
			$tout .= "<option selected>$_\n"; 
		}else{
			$tout .= "<option>$_\n";
		}
	}

	$tout .= "<option>\n";

	$tout .= "<option>---profile--------------\n";
	foreach(sort @t_profile){
		if($input{'nexttemp'} eq $_){
			$tout .= "<option selected>$_\n"; 
		}else{
			$tout .= "<option>$_\n";
		}
	}

	$tout .= "<option>\n";

	$tout .= "<option>---member--------------\n";
	foreach(sort @t_member){
		if($input{'nexttemp'} eq $_){
			$tout .= "<option selected>$_\n"; 
		}else{
			$tout .= "<option>$_\n";
		}
	}

	$tout .= "<option>\n";

	$tout .= "<option>---addon---------------\n";
	foreach(sort @t_addon){
		if($input{'nexttemp'} eq $_){
			$tout .= "<option selected>$_\n"; 
		}else{
			$tout .= "<option>$_\n";
		}
	}

	$tout .= "<option>\n";


	$tout .= "<option>---search--------------\n";
	foreach(sort @t_search){
		if($input{'nexttemp'} eq $_){
			$tout .= "<option selected>$_\n"; 
		}else{
			$tout .= "<option>$_\n";
		}
	}

	$tout .= "<option>\n";

	$tout .= "<option>---other--------------\n";
	foreach(sort @t_other){
		if($input{'nexttemp'} eq $_){
			$tout .= "<option selected>$_\n"; 
		}else{
			$tout .= "<option>$_\n";
		}
	}

	$tout .= "<option>\n";

        $tout .= "</select>\n\n";

	$tout .= "<input type=submit name=submit value=load>";

	$tout .= "
		</td></tr>
		</form>
		<tr><td colspan=2>";

	# create a form for each edit=profile type


	if($input{'nexttemp'} ne ""){
		$tp = $tempz{$input{'nexttemp'}};
		if($tp ne "")
		{
			open(T, "<${root}$tp") or die "${root}$tp: $!";
			@l = <T>;
			close T;
			$template = join("", @l);
			$template =~ s/\<\/textarea\>/\&lt;\/textarea\>/ig; 
			$template =~ s/\r\n/\n/g;
			$template =~ s/\&nbsp/\&amp\;nbsp/g;
			$tout .= "<form method=post action=admin.cgi name=name>";
			$tout .= "<input type=hidden name=pass value=$input{'pass'}>";
			$tout .= "<input type=hidden name=action value=edittemp>";
			$tout .= "<input type=hidden name=nexttemp value=\"$input{'nexttemp'}\">";
			$tout .= "<input type=hidden name=file value=\"$input{'nexttemp'}\">";
			$tout .= "<textarea name=text cols=110 rows=25>$template</textarea>";
			$tout .= "</td></tr><tr><td align=left>";
			$tout .= "<input name=\"string\" type=\"text\" size=\"5\" onChange=\"n=0;\">";
			$tout .= "<input type=\"button\" value=\"find\" onClick=\"javascript:findInPage(document.name.string.value)\">";
			$tout .= "</td><td align=right>";
			$tout .= "<input type=submit name=submit value=\"  modify  \">";
			$tout .= "</form>";
		}
	}
	$tout .= "</td></tr></table>";

	if($input{'file'} eq "static_display"){
		$tout .= "<b><center>&nbsp;&nbsp;&nbsp;<a href=admin.cgi?action=rebuild_static_profiles>Rebuild all static profiles</a></center></b>";
	}

	$input{'action'} = "tempedit";
	$values{'output'} = $tout;
}

sub massedited
{
        my $cf = $input{'changefrom'};
        my $ct = $input{'changeto'};
        my $no_of_tempz = keys %tempz;
        my $tout = "$no_of_tempz files are scanned...";
        foreach my $tn(keys %tempz){
                my $tf = $tempz{$tn};
                if( open(TEMPR, "<${root}$tf") ) {
                        my @arrtempfile = <TEMPR>;
                        #my $tempfile = join("", @arrtempfile);
                        close TEMPR;
                        my @newarrtempfile = ();
                        foreach my $line(@arrtempfile){
                                if($line =~ m/\Q${cf}/){
                                        $modifiedfiles{$tn} = $tf;
                                        $line =~ s/\Q${cf}/${ct}/g;
                                }
                                push(@newarrtempfile, $line);
                        }
                        open(TEMPW, ">${root}$tf") or print "Cannot open ${root}$tf for writing: $!\n<br>";
                        print TEMPW @newarrtempfile;
                        close TEMPW;
                        #open(TEMPW, ">/tmp/temp/$tn") or print $!;
                        #print TEMPW @newarrtempfile;
                        #close TEMPW;
                        #print "\ndiff /tmp/temp/$tn $tf";
                        #print `diff /tmp/temp/$tn $tf`;
                        #print "\n";
                } else { print "Cannot open ${root}$tf for reading: $!\n<br>"; }
        }

        $no_of_modifiedfiles = keys %modifiedfiles;
        if( $no_of_modifiedfiles < 1){
                $tout .= "<br>String not found on any of the files.\n";
        }else{
                $tout .= "<br>String has been replaced on $no_of_modifiedfiles files:<ul>";
                foreach(keys %modifiedfiles){
			$tout .= "\n<li><a href=admin.cgi?action=edittemp&nexttemp=$_>$_</a><font color=gray> ($modifiedfiles{$_})</font>";
                }
                $tout .= "</ul>\n\n";
        }
        $input{'output'} = $tout;
}

sub tempfind_results
{
        my $text = $input{'text'};
        my $no_of_tempz = keys %tempz;
        my $tout = "$no_of_tempz files are scanned...";
	%foundfiles = ();
        foreach my $tn(keys %tempz){
                my $tf = $tempz{$tn};
                if( open(TEMPR, "<${root}$tf") ) {
                        my @arrtempfile = <TEMPR>;
                        close TEMPR;
			my $lastline = "";
			my $catch_nextline  = "";
                        foreach my $line(@arrtempfile){
				if($catch_nextline ne ""){
					$foundlines{$catch_nextline} .= $line;
					$catch_nextline = "";
				}
                                if($line =~ m/\Q$text/i){
                                        $foundfiles{$tn} = $tf;
					$foundlines{$tn} = $lastline.$line;
					$catch_nextline = $tn;
                                }
				$lastline = $line;
                        }
                } else { print "Cannot open ${root}$tf for reading: $!\n<br>"; }
        }

        $no_of_foundfiles = keys %foundfiles;
        if( $no_of_foundfiles < 1){
                $tout .= "<br>String not found on any of the files.\n";
        }else{
                $tout .= "<br>String has been found on $no_of_foundfiles files:<ul>";
                foreach(keys %foundfiles){
                        $tout .= "\n<font size=2><li><a href=admin.cgi?action=edittemp&nexttemp=$_>$_</a><font color=gray> ($foundfiles{$_})</font></font>";
			$tout .= html_code_box($foundlines{$_}, $text);
			$tout .= "<p>";
                }
                $tout .= "</ul>\n\n";
        }
        $input{'output'} = $tout;
}

sub html_code_box
{
        my ($code, $bold) = @_;
        return "
                <table border=1 bordercolor=gray cellpadding=10 cellspacing=0 bgcolor=#f2eaea width=600><tr><td>
                <font size=2 face=arial><font color=#333333>
                " . html_code_showable($code, $bold) . "
                </font></font></td></tr></table></font>
        ";
}

sub html_code_showable
{
        my ($code, $bold) = (@_);
        $newcode = "";
        foreach my $c(split "\n", $code){
                $c =~ s/&/&amp;/g;
                $c =~ s/</&lt;/g;
                $c =~ s/>/&gt;/g;
                $c =~ s/"/&quot;/g;
                $newcode .= "$c\n<br>\n";
        }
	$newcode =~ s/($bold)/<b>\1<\/b>/gi;
        return $newcode;
}


sub backup
{
 &get_time;
 my @rowz;
 open (DATABASE, "<${root}$database");
 while (($line = <DATABASE>))
 {	push (@rowz, $line); }
 close DATABASE;

 open (DATABASE, ">${root}$backup_folder/$timeno.dat");
 print DATABASE @rowz;
 close DATABASE;
}

sub retrieve
{
 my @rowz;
 if($input{'file'} eq ""){ &err("no file is selected for backup");exit;}
 open (DATABASE, "<${root}$backup_folder/$input{'file'}");
 while (($line = <DATABASE>))
 {	push (@rowz, $line); }
 close DATABASE;

 open (DATABASE, ">${root}$database");
 foreach $rowz(@rowz) {print DATABASE $rowz};
 close DATABASE;
}
sub backup_list
{
        opendir(FOLDER, "${root}$backup_folder");
        @files = readdir(FOLDER);
        closedir FOLDER;

        $values{'backup list'} .= "<select name=file size=5>\n";
        foreach $file(reverse(@files))
        {
         if ($file =~ m/\.dat/)
         {$values{'backup list'} .=   "<OPTION VALUE=\"$file\"> $file\n";}
        }
        $values{'backup list'} .= "</select>\n";
}

sub users
{
      $admin_link = 1;
      if($input{'sortby'} eq ""){
	      $list_alphabetic = "yes";
      }
      $input{'sortby'} = "lastname";
      $input{'reverse'} = "no";
      $tempz{'list_table'} = 	$tempz{'admin_list_table'};
      $tempz{'list_table_next'} = 	$tempz{'admin_list_table'};
	if($input{'catvalue'} eq ""){
		$input{'catvalue'} = "all";
	}
	&list;
	$values{'pass'} = $input{'pass'};
	&tempwiz;
}


exit;




sub env
{
 print "<table><tr><td>";
 print join("\n<br>", keys %ENV); 
 print "</td><td>";
 print join("\n<br>", values %ENV); 
 print "</td></tr></table>";
}

&check_secure;

if ($input{'action'} eq "menu")
	{&menu;}
elsif ($input{'action'} eq "list")
	{&admin_list;}
elsif ($input{'action'} eq "message_central")
	{&message_central;}
elsif ($input{'action'} eq "statistics")
	{&statistics;}
 else {&admin_login;}

sub menu 
{
		print qq~
	
		<body bgcolor=#008080 text=#FFFFFF link=#FFFFFF vlink=#FFFFFF>
		<p align=center><font face=arial><strong>Membership
		Administration</strong></font></p>
		
		    <li><p align=left><a href=admin.cgi?action=list&check=$input{'check'}><font face=arial><strong>List</a>: </strong></font><font
		        size=2 face=arial>Gives the listing of all members </font></p>
		    </li>
		    <li><p align=left><a href=admin.cgi?action=message_central&check=$input{'check'}><font face=arial><strong>Message
		        Central:</strong></font></a></p>
		    </li>
		    <li><p align=left><a href=board.cgi?action=admin><font face=arial><strong> Board Admin:</strong></font></a></p>
		    </li>
		    <li><p align=left><a href=admin.cgi?action=statistics&check=$input{'check'}><font face=arial><strong>Statistics: </strong></font></a></p>
		    </li>
		    <li><font face=arial><strong>Archive: </strong></font><br><b>archive
		        no:</b> this is the text used in the archive file name. You
		        can use it as week number. <b>Caution:</b> if you give a number,
		        which is already exist, it will overwrite it! <br>
		         <form
		        action=http://www.interlogy.com/cgi-bin/globalthink/archive.pl
		        method=get>
		            <p>arhchive no:<input type=text size=25
		            name=name><br>
		            link text:<input type=text size=25 name=text><br>
		            <select name=branch size=1>
		                <option value=bussiness> bussiness</option>
		                <option value=arts> arts</option>
		                <option value=health> health</option>
		                <option value=lifestyle> lifestyle</option>
		                <option value=spiritual> spiritual</option>
		                <option value=technology> technology</option>
		            </select><input type=submit name=submit
		            value=Submit></p>
		        </form>
		    </li>
		    <li><p align=left><font face=arial><strong>Delete:</strong></font>
			<font
		        size=2 face=arial>This will remove the account permanently!</font></p>
		    </li>
		<form action=delete.cgi method=get>
			<font size=2 face=Verdana>Login Name: </font>
			<input type=text color=grey name=0 size=25>
			<input type=hidden name=1 value=admin_says_so>
		<input type=submit name=submit value=Delete></p>
		    <li><p align=left><font face=arial><strong>Membership Approval: </strong></font><font
		        size=2 face=arial>These entries are waiting for your
		        approval.</font></li>
        $ourapprovel_html
	        <p>

		</ul>
		<p>&nbsp;</p>
		</body>
		</html>
	
	~;


}

sub statistics{
	print "<h4> STATISTICS </H4> <p><br>";
	open(STATISTICS, "<${root}$statistics_file");
	while (( $stats = <STATISTICS>))
	{
		print "$stats\n";
	}
	close STATISTICS;
	exit;
}


sub message_central{
	open (FILE, "<${root}$message_central_file") or die " can not open $approve_file!";
	while (($ourfile = <FILE>))
	{
		print "$ourfile\n";
	}
	close FILE;
	exit;
}	

	
sub last_visitors
{
  
  @statz = reverse(@statz);

  #last 20
  $recent = $input{'number'};
  $stats_html = "<table rules=rows frame=hsides border=1 bordercolor=#020202 cellspacing=0 cellpadding=5 width=700>";
  $stats_html .= "\n<tr>";
  $stats_html .= "\n\t<td bgcolor=#7b7b7b nowrap> <FONT color=white face=verdana size=1> <B> Time</b></TD>";
  $stats_html .= "\n\t<td bgcolor=#7b7b7b nowrap> <FONT color=white face=verdana size=1><B> Login</b></TD>";
  $stats_html .="\n\t<td bgcolor=#7b7b7b nowrap> <FONT color=white face=verdana size=1> <B> IP</b></TD>";
  $stats_html .= "\n\t<td bgcolor=#7b7b7b nowrap> <FONT color=white face=verdana size=1><B> Browser</b></TD>";
  $stats_html .= "\n\t<td bgcolor=#7b7b7b nowrap> <FONT color=white face=verdana size=1><B> O/S</b></TD>";
  $stats_html .= "\n</tr>";

 if($input{'next'}<1){
	$input{'next'} = 0;
 }

 for($i = $input{'next'}; $i<$input{'next'}+$recent && $i<$values{'total logins'}; $i++)
 {
 	@fieldz = split(/\|/, $statz[$i]);
	$stats_html .= "\n<tr>\n";
	$stats_html .= "<td bgcolor=white nowrap> <FONT color=black face=verdana size=1> $fieldz[3]</TD>";
	$stats_html .= "\n\t<td bgcolor=ffffdd nowrap> <FONT color=000000 face=verdana size=1>";
	$stats_html .= "<a href=pm.cgi?login=$fieldz[2]&action=display>$fieldz[2]</a> </TD>";
	if($fieldz[5] eq "")
	{
	 $stats_html .= "\n\t<td bgcolor=white nowrap> <FONT color=000000 face=verdana size=1> $fieldz[4]</td>";
	}
	else
	{
	 $stats_html .= "\n\t<td bgcolor=white nowrap> <FONT color=000000 face=verdana size=1> $fieldz[5]</td>";
	}
	$stats_html .= "\n\t<td bgcolor=ffffdd align=left nowrap> <FONT color=000000 face=verdana size=1> $fieldz[6] </TD>";
	$stats_html .= "\n\t<td bgcolor=white align=left nowrap> <FONT color=000000 face=verdana size=1> $fieldz[7] </TD>";
	$stats_html .= "\n</tr>\n";
 }	
  $stats_html .= "</table>\n";
  $input{'next'} += $i; 
  if($i<$values{'total logins'}){
	$stats_html .= "<br><a href=admin.cgi?action=stats&pass=$input{'pass'}&number=$input{'number'}&next=$input{'next'}>next</a><br>";
  }

}

sub show_search_stats 
{

 if($input{'number'}<1){
 	$input{'number'} = 0;
 }

 open (STAT, "<${root}$h_search");
 while (($line = <STAT>))
 {	push (@statz, $line); }
 close STAT;

 @statz = reverse(@statz);

 $values{'total searches'} = @statz;
 if($values{'total searches'} > 10000){
	print "<p><b>Warning:</b> Delete(reset) $h_search file if this page gets very slow!<p>";
 }

 $where_next = 0;
 $stats_html .= "<table border=0 cellspacing=0><tr>
  <td align=left bgcolor=#7b7b7b> <font color=white face=verdana size=2><b>IP</b></td>
  <td align=left bgcolor=#7b7b7b> <font color=white face=verdana size=2><b>&nbsp;&nbsp;</b></td>
  <td align=left bgcolor=#7b7b7b> <font color=white face=verdana size=2><b>Query</b></td>
  </tr>";
 for($i=$input{'number'}; $i<$input{'number'}+20; $i++){
   $where_next++;
   $bcolor = ($where_next%2)?"white":"ffffdd";
   $fcolor="black";
   if($statz[$i] ne ""){
	   my($IP, $query) = split(/\|/, $statz[$i]);
	   $query_readable = join("<br>", split(/\&/, $query));
	   $stats_html .= "<tr bgcolor=$bcolor><td valign=top  bgcolor=$bcolor><font color=$fcolor face=verdana size=1>$IP</td>
		<td  bgcolor=$bcolor></td>
		<td  bgcolor=$bcolor><a href=\"search.cgi?$query\" target=_blank><font color=$fcolor face=verdana size=1>$query_readable</font></a></td></tr>";
   }
 } 
 $stats_html .= "</table><p>
		<a href=\"javascript:history.go(-1)\">Back</a>  "; 

 if($input{'number'}+20<$values{'total searches'}){
	 $where_next = $input{'number'}+20;
	 $stats_html .= "- <a href=admin.cgi?action=search_stats&pass=$input{'pass'}&number=$where_next>Next</a>";
 }

 $values{'stats'} = $stats_html;

}

 
sub show_stats 
{

 if($input{'number'}<1){
 	$input{'number'} = 20;
 }

 open (STAT, "<${root}$stat_file");
 while (($line = <STAT>))
 {	push (@statz, $line); }
 close STAT;

 $values{'total logins'} = @statz;
 if($values{'total logins'} > 10000){
	print "<p><b>Warning:</b> Delete stats.dat file if this page gets very slow!<p>";
 }

 &last_visitors;

 ($sec, $min, $hr, $today, $thismonth, $ye, $wd, $yd, $ds) =  localtime();

 my $day=$yd; my $win; my $exp;
 for(my $i=0; ($i<@statz)&&($yd-$day<20); $i++)
 {
	@statdetail = split(/\|/, $statz[$i]);
 	@digits = split(//, $statdetail[0]);
 	$day = 100*$digits[13]+10*$digits[14]+$digits[15]-100;
	@daycount[$day]++;
	if($statdetail[6] eq "Explorer") { $exp++; }
	if($statdetail[7] =~ m/Win/i) { $win++; }
	#print "$day -> $daycount[$day] -> $win -> $exp\n";
 }

 $values{'stats'} = $stats_html;

}

sub show_tracking
{

 my $perpage = 20;
 my $start = 0;
 if($input{'next'}>0){
	$start = $input{'next'};
 	$input{'next'} += $perpage;
 }

 my $nolines = 0;
 my $end = $start + $perpage;

 #- get the number of line on the file
 open (TRACK, "<${root}$track_file");
 $nolines++ while(<TRACK>);
 close TRACK;
 if($nolines > 10000){
	print "<p><b>Warning:</b> Delete or trim track.dat file if this page gets very slow!<p>";
 }

 $reverse_start = $nolines - $start;
 $reverse_end = $nolines - $end;

 my $count = 0;
 open (TRACK, "<${root}$track_file");
 while (($line = <TRACK>))
 {
	if($count<$reverse_start && $count>=$reverse_end){		
		push (@trackz, $line); 
	}
	$count++;
 }
 close TRACK;

  my $track_html = "";
  if($track_user ne "yes"){
	$track_html .= "<p>Currently disabled. <a href=setup.cgi?action=modify&variable=track_user>Enable this feature</a>.<p>";
  }

  $track_html .= "<table rules=rows frame=hsides border=1 bordercolor=#020202 cellspacing=0 cellpadding=5 width=700>";
  $track_html .= "\n<tr>";
  $track_html .="\n\t<td bgcolor=#7b7b7b align=left width=200> <FONT color=white face=verdana size=1> <B>  Time </b></TD>";
  $track_html .= "\n\t<td bgcolor=#7b7b7b nowrap> <FONT color=white face=verdana size=1> <b> Login</b> </TD>";
  $track_html .= "\n\t<td bgcolor=#7b7b7b align=left nowrap> <FONT color=white face=verdana size=1> <b> Action </b></TD>";
  $track_html .= "\n</tr>";


 foreach(reverse @trackz){
	my($l, $a, $t) = split /\|/;
	$track_html .= "\n<tr>";
	$track_html .="\n\t<td bgcolor=white align=left width=180> <FONT color=black face=verdana size=1>  $t </font></TD>";
	$track_html .= "\n\t<td bgcolor=ffffdd nowrap> <FONT color=black face=verdana size=1> <a href=pm.cgi?action=display&login=$l>$l</a> </font></TD>";
	$track_html .= "\n\t<td bgcolor=white align=left> <FONT color=black face=verdana size=1> $a </TD>";
	$track_html .= "\n</tr>";
 }
 $track_html .= "<tr><td><a href=\"javascript:history.go(-1)\">back</a></td><td></td><td align=right> ";
 $track_html .= "<a href=admin.cgi?action=tracking&next=$end>next</a>" if($reverse_end > 0);
 $track_html .=	"</td></tr>"; 
 $track_html .= "</table>\n";


 $values{'tracking'} = $track_html;
}

sub approveall
{
 @lines = ();
 open (DATABASE, "<${root}$database");
 while(<DATABASE>){
        my($login, $id, $password) = split(/\|/, $_);
        if($htaccess_use_id eq "no"){
                $encrypted = crypt($password, $encrypt_addon);
        }else{
                $encrypted = crypt($id, $encrypt_addon);
        }
        push(@lines,  "$login:$encrypted\n");
 }
 close DATABASE;

 open(H, ">$content_pass_file") or die "Cannot open htpassword file($content_pass_file): $!";
 print H @lines;
 close H;
 $count = @lines;

 $values{'awaiting'} .= "<center><font color=green size=1 face=arial>All accounts have been approved!</font></center>";
 $input{'action'} = "approval";
 &approval; &tempwiz; &admin_end;
}


sub rebuild_static_profiles
{
	$| = 1;
	print "starting...\n";
	open(DATA, "<${root}${database}");
	while(my $row = <DATA>){
		chop;
		%values = ();
		%input = ();
		&init($row);
		%input = %values;
		&link_info; &link_em;
		print "<li>processing $values{'login'}...";
		&create_static_profile;
	}
	close DATA;
}

sub create_static_profile
{
      $static_file = "";
      if($static_pages eq "yes")
      {
         if($use_static_directory eq "no"){
               $sdir = "${static_dir}";
               $sfile = "${static_dir}/$input{'login'}.$static_extension";
         }else{
               $sdir = "${static_dir}$input{'login'}";
               mkdir("$sdir", 0777);
               $sfile = "$sdir/index.$static_extension";
         }
         foreach(keys %input){
            if($input{$_} eq " " && $default{$_} ne ""){
                  $input{$_} = $default{$_};
            }
         }
         &tempwiz_static;
         if($static_extension eq ""){
            $static_extension = "html";
         }
         print "writing to: $sfile";
         open (FILE, ">$sfile")
            or print "Cannot open the static file($sfile)
                        for writing: $!
                        <b>Make sure the path is correct and the folder is writable.";
         print FILE $static_file;
         close FILE;
      }
}