#!/usr/bin/perl

use strict;
use CGI;
use CGI::Carp;
use Pg;


my $db = 'cattleweb';
my $bgcolor = '#ffffff';
my $defbanner = "http://www.cattleweb.net/images/cattlewebtitle.gif";
my $expire = "28"; # Number of days before an ad expires

my $q = new CGI;

my $conn;
print $q->header('text/html');
if( ($q->path_info() eq '/verify') || ($q->path_info() eq 'verify') )
{
	&Verify;
} elsif( ($q->path_info() eq '/submit') || ($q->path_info() eq 'submit') ) 
{
	&Finish;
} else {
	&ShowForm;
}


############################################################################

#----------------------------------------------------------------
# ShowForm
#
# Just show the form
#----------------------------------------------------------------
sub ShowForm
{
	my $script = $q->script_name();
	print $q->start_html(-title=>'Classified Advertisement Form',
								-BGCOLOR=>$bgcolor);
	
	my $id = 0;
	my $query;
	my $banner;
	if(length($ENV{'QUERY_STRING'}) > 0)
	{
		$id = $ENV{'QUERY_STRING'};
		$conn = Pg::new('','','','',$db);
		$query = "SELECT bannerurl FROM classified_owners WHERE id=$id";
		my $r = $conn->exec($query);
		$banner = $r->getvalue(0,0);
	}

	if(length($banner) > 0)
	{
		print "<CENTER><IMG SRC=\"$banner\" ALT=\"BANNER\"></center>\n"
	} else {
		print "<CENTER><IMG SRC=\"$defbanner\" ALT=\"BANNER\"></center>\n"
	}
		
	print <<END;
	<FORM METHOD=POST ACTION="$script/verify">
	<CENTER>
	<TABLE BORDER=1>
	<TR>
		<TD ALIGN=RIGHT><B>Category:</b></td>
		<TD WIDTH=20></td>
		<TD>
		<SELECT NAME="category">
		<OPTION VALUE="Accessories">Accessories</option>
		<OPTION VALUE="Associations">Associations</option>
		<OPTION VALUE="Consultants">Consultants</option>
		<OPTION VALUE="Equipment">Equipment</option>
		<OPTION VALUE="Feed & Fertilizer">Feed & Fertilizer</option>
		<OPTION VALUE="Feedlots">Feedlots</option>
		<OPTION VALUE="Hunting">Hunting</option>
		<OPTION VALUE="Livestock">Livestock</option>
		<OPTION VALUE="Pharmaceuticals">Pharmaceuticals</option>
		<OPTION VALUE="Virtual Ranches">Virtual Ranches</option>
		</SELECT>
		</td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>Company:</b></td>
		<TD WIDTH=20></td>
		<TD><INPUT TYPE=TEXT SIZE=30 NAME="company"></td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>Name:</b></td>
		<TD WIDTH=20></td>
		<TD><INPUT TYPE=TEXT SIZE=30 NAME="name"></td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>Phone:</b></td>
		<TD WIDTH=20></td>
		<TD><INPUT TYPE=TEXT SIZE=30 NAME="phone"></td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>City:</b></td>
		<TD WIDTH=20></td>
		<TD><INPUT TYPE=TEXT SIZE=30 NAME="city"></td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>State:</b></td>
		<TD WIDTH=20></td>
		<TD><INPUT TYPE=TEXT SIZE=30 NAME="state"></td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>Country:</b></td>
		<TD WIDTH=20></td>
		<TD><INPUT TYPE=TEXT SIZE=30 NAME="country"></td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>Email:</b></td>
		<TD WIDTH=20></td>
		<TD><INPUT TYPE=TEXT SIZE=30 NAME="email"></td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>URL:</b></td>
		<TD WIDTH=20></td>
		<TD><INPUT TYPE=TEXT SIZE=30 NAME="url"></td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>Advertisement:</b></td>
		<TD WIDTH=20></td>
		<TD>
			<TEXTAREA ROWS=10 COLS=60 NAME="text" WRAP=PHYSICAL></textarea>
		</td>
	</tr>

	<TR>
		<TD ALIGN=CENTER COLSPAN=3>
		<INPUT TYPE=SUBMIT VALUE="Continue">
		</td>
	</tr>
	</table>
	</center>
END
	if($id > 0)
	{
		print "<INPUT TYPE=HIDDEN NAME=\"pid\" VALUE=\"$id\">\n";
	}

	print "</form>";
	print $q->end_html();
}






#------------------------------------------------------------------
# Verify
#
# Verify data and show it to the user 
#------------------------------------------------------------------
sub Verify
{

	print $q->start_html(-title=>'Classified Advertisement Form',
								-BGCOLOR=>$bgcolor);
	my %in = ();
	for ($q->param())
	{
		$in{$_} = $q->escapeHTML($q->param($_));
	}

	my $banner;
	my $pid;

	if($q->param('pid'))
	{
		$pid = $q->param('pid');
		$conn = Pg::new('','','','',$db);
		my $query = "SELECT bannerurl FROM classified_owners WHERE id=$pid";
		my $r = $conn->exec($query);
		$banner = $r->getvalue(0,0);
	}

	if(length($banner) > 0)
	{
		print "<CENTER><IMG SRC=\"$banner\" ALT=\"BANNER\"></center>\n"
	} else {
		print "<CENTER><IMG SRC=\"$defbanner\" ALT=\"BANNER\"></center>\n"
	}

	my $script = $q->script_name();
	print <<END;
	<FORM METHOD=POST ACTION="$script/submit">
	<CENTER>
	<TABLE BORDER=1>
	<TR>
		<TD ALIGN=RIGHT><B>Category:</b></td>
		<TD WIDTH=20></td>
		<TD>$in{'category'}</td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>Company:</b></td>
		<TD WIDTH=20></td>
		<TD>$in{'company'}</td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>Name:</b></td>
		<TD WIDTH=20></td>
		<TD>$in{'name'}</td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>Phone:</b></td>
		<TD WIDTH=20></td>
		<TD>$in{'phone'}</td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>City:</b></td>
		<TD WIDTH=20></td>
		<TD>$in{'city'}</td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>State:</b></td>
		<TD WIDTH=20></td>
		<TD>$in{'state'}</td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>Country:</b></td>
		<TD WIDTH=20></td>
		<TD>$in{'country'}</td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>Email:</b></td>
		<TD WIDTH=20></td>
		<TD>$in{'email'}</td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>URL:</b></td>
		<TD WIDTH=20></td>
		<TD>$in{'url'}</td>
	</tr>

	<TR>
		<TD ALIGN=RIGHT><B>Advertisement:</b></td>
		<TD WIDTH=20></td>
		<TD>
			$in{'text'}
		</td>
	</tr>

	</table>

END

	for ($q->param()) 
	{
		print "<INPUT TYPE=HIDDEN NAME=\"$_\" VALUE=\"$in{$_}\">\n";
	}
	print "<INPUT TYPE=SUBMIT VALUE=\"Finish\">\n";
	print "</center>\n";
	print $q->end_html();
}


sub Finish
{
	print $q->start_html(-title=>'Database Submission Complete',
								-BGCOLOR=>$bgcolor);

	$conn = Pg::new('','','','',$db);

	my %in = ();
	for ($q->param())
	{
		$in{$_} = $q->param($_);
		$in{$_} =~ s/'/\\'/g;
		$in{$_} =~ s/^/'/g;
		$in{$_} =~ s/$/'/g;
	}
	$conn->exec("BEGIN");

	# create the classified
	my $query = "INSERT INTO classified (category, company, name, phone, ".
					"            city, state, country, email, url, text, expire) ".
					"            VALUES ( ".
					"            $in{'category'}, $in{'company'}, $in{'name'}, ".
					"            $in{'phone'}, $in{'city'}, $in{'state'}, ".
					"            $in{'country'}, $in{'email'}, $in{'url'}, ".
					"            $in{'text'}, 'now'::date+$expire) ";

	my $r = $conn->exec($query);

	# get id number of the ad
	$query = "SELECT currval('classifiedid')";
	$r = $conn->exec($query);
	my $adid = $r->getvalue(0,0);

	# make an entry in the ad owners table to link it up to an owner
	if($q->param('pid'))
	{
		$query = "INSERT INTO ad_owners (adid, ownerid) VALUES ($adid, ".
					$q->param('pid') . ")";
		$conn->exec($query);
	}

	$conn->exec("END");

	my $pid;
	my $banner;
	if($q->param('pid'))
	{
		$pid = $q->param('pid');
		$query = "SELECT bannerurl from classified_owners WHERE id=$pid";
		$r = $conn->exec($query);
		$banner = $r->getvalue(0,0);
	}
		
	print "<CENTER>\n";
	if(length($banner))
	{
		print "<IMG SRC=\"$banner\" ALT=\"BANNER\">\n";
	} else {
		print "<IMG SRC=\"$defbanner\" ALT=\"BANNER\">\n";
	}

	print <<END;
	</center>
	<P>
	Your Submission has been completed.  Your Ad will run for $expire days.
	Thank you!
END
	print $q->end_html();

}