#!/usr/bin/perl
use strict;
#use lib 'C:\Inetpub\wwwroot\Sites\asp\echoingw\members\login.';
use lib '.';
use MyBoard;

my ($msgid, $sth, $rv, $count, $msg, $resp);

# untaint the query string
if ($ENV{QUERY_STRING} =~ /^(\d+)$/) {
    $msgid = $1;
} else {
    &dienice("$ENV{QUERY_STRING} isn't a valid message number.");
}

$sth = $dbh->prepare("select *, date_format(date, '%W, %M %e, %Y') as nicedate, date_format(date, '%l:%i %p') as nicetime from messages where (messages.id=? or thread_id=?) order by thread_id, date") or &dbdie;
$rv = $sth->execute($msgid, $msgid);
if ($rv < 1) {
   &dienice("Message $msgid does not exist.");
}
$msg = $sth->fetchrow_hashref;

# if the FIRST message is a follow-up, redirect them to the entire
# page for that message thread.
if ($msg->{thread_id} != 0) {
   print $cgi->redirect("$url/message.cgi?$msg->{thread_id}#$msg->{id}");
   exit;
}

&do_header("$btitle: $msg->{nicedate}: $msg->{subject}");

## BEGIN HEADER PAGE CONTENT ##
print qq();

&showpost($msg);
$resp = 0;
while ($msg = $sth->fetchrow_hashref) {
    if ($resp == 0) {
       print qq(<font face="Geneva, Arial, Helvetica" size="+1">Comments</font><p>\n);
       $resp = 1;
     }
&showpost($msg);
}

&do_footer;

sub showpost {
    my($hdr);
    my($msg) = @_;
    
# Ban Filter Curse.
#     my($searchstr, $i);
#     my(@searchstr) = "$msg->{message}";
#     	foreach $i (@searchstr) {
# 	    	chomp($i);
#     $sth = $dbh->prepare("select curse from xcurse") or &dbdie;
#     $rv = $sth->execute;
#     while (my($curse) = $sth->fetchrow_array) {
# 	    if ($i = $curse) {
# 	    $msg->{message} =~ s/$curse/#!@%/ig;
#     		}
#     	}
#     }

    # Convert hard returns to line returns in post.
    $msg->{message} =~ s/\r/<br>/g;
    
    # Stip all HTML Tags and convert to &alt characters.
    $msg->{message} =~ s/</&lt;/g;
    $msg->{message} =~ s/</&gt;/g;

    # Convert <br> tag back to HTML.
    $msg->{message} =~ s/&lt;br/<br/g;
    $msg->{message} =~ s/&gt;br/<br/g;
    

    # Italics
    $msg->{message} =~ s/\[i\]/\<i>/g;
    $msg->{message} =~ s/\[\/i\]/\<\/i>/g;

    # Bold
    $msg->{message} =~ s/\[b\]/\<b>/g;
    $msg->{message} =~ s/\[\/b\]/\<\/b>/g;

    # Underline
    $msg->{message}=~ s/\[u\]/\<u>/g;
    $msg->{message} =~ s/\[\/u\]/\<\/u>/g;
   
    # Lists
    $msg->{message}=~ s/\[ul\]/\<ul>/g;		# ul tags
    $msg->{message} =~ s/\[\/ul\]/\<\/ul>/g;
    $msg->{message}=~ s/\[ol\]/\<ol>/g;		# ol tags
    $msg->{message} =~ s/\[\/ol\]/\<\/ol>/g;
    $msg->{message}=~ s/\[li\]/\<li>/g;			# li tags
    $msg->{message} =~ s/\[\/li\]/\<\/li>/g;

    # Handle URL's in post
    $msg->{message} =~ s/\[url]+http:\/\/[^\s]+[a-z0-9\/\.]\[\/url]/<a href=\"$&\" target=\"_blank\" title=\"$&\">$&\[img]$imgdir\/go.gif[\/img\]<\/a>/g;
    $msg->{message} =~s/\[url]//g;
    $msg->{message} =~s/\[\/url]//g;
   
    # Handle images in post
    #  $msg->{message} =~ s'<img src=[^\s]+[a-z0-9\/\.]'$&?"<img src=\"$&\">":""'eig;
    $msg->{message} =~ s/\[img\]/\<img src=\"/g;
    $msg->{message} =~ s/\[\/img\]/\"\ border=\"0\">/g;
    
    # Convert <embed> tag back to HTML.
    #$msg->{message} =~ s/&lt;embed/<embed/g;
    #$msg->{message} =~ s/&gt;embed/<embed/g;
    
    # Convert <object> tag back to HTML.
    #$msg->{message} =~ s/&lt;object/<object/g;
    #$msg->{message} =~ s/&gt;object/<object/g;
    
    # Convert <param> tag back to HTML.
    #$msg->{message} =~ s/&lt;param/<param/g;
    #$msg->{message} =~ s/&gt;param/<param/g;
    
    # Handle youtube in post
    $msg->{message} =~s/\[youtube]+[a-z0-9\/\.\A-Z]\[\/youtube]/<object width=\"425\" height=\"344\"><param name=\"movie\" value=\"http:\/\/www.youtube.com\/v\/$&\"><\/param><param name=\"allowFullScreen\" value=\"true\"><\/param><param name=\"allowscriptaccess\" value=\"always\"><\/param\><embed src=\"http:\/\/www.youtube.com\/v\/$&\" type=\"application\/x-shockwave-flash\" allowscriptaccess=\"always\" allowfullscreen=\"true\" width=\"425\" height=\"344\"><\/embed><\/object>/g;
    $msg->{message} =~s/\[youtube]//g;
    $msg->{message} =~s/\[\/youtube]//g;
    
    # Handle hulu in post
    $msg->{message} =~s/\[hulu]+[^\s]+[a-z0-9\/\.\A-Z]\[\/hulu]/<object width=\"512\" height=\"296\"><param name=\"movie\" value=\"http:\/\/www.hulu.com\/embed\/$&\"><\/param><param name=\"allowFullScreen\" value=\"true\"><\/param><param name=\"allowscriptaccess\" value=\"always\"><\/param\><embed src=\"http:\/\/www.hulu.com\/embed\/$&\" type=\"application\/x-shockwave-flash\" allowFullScreen=\"true\"  width=\"512\" height=\"296\"><\/embed><\/object>/g;
    $msg->{message} =~s/\[hulu]//g;
    $msg->{message} =~s/\[\/hulu]//g;
    
    # Handle myspace in post
    $msg->{message} =~s/\[myspace]+[^\s]+[a-z0-9\/\.\A-Z]\[\/myspace]/<object width=\"425px\" height=\"360px\"><param name=\"allowFullScreen\" value=\"true\"\/><param name=\"wmode\" value=\"transparent\"\/><param name=\"movie\" value=\"http:\/\/mediaservices.myspace.com\/services\/media\/embed.aspx\/m=$&,t=1,mt=video\"\/><embed src=\"http:\/\/mediaservices.myspace.com\/services\/media\/embed.aspx\/m=$&,t=1,mt=video\" width=\"425\" height=\"360\" allowFullScreen=\"true\" type=\"application\/x-shockwave-flash\" wmode=\"transparent\"><\/embed><\/object>/g;
    $msg->{message} =~s/\[myspace]//g;
    $msg->{message} =~s/\[\/myspace]//g;
    
    #$msg->{message} =~s/\[hulu]+[^\s]+[a-z0-9\/\.]\[\/hulu]/<object width=\"512\" height=\"296\"><param name=\"movie\" value=\"http:\/\/www.hulu.com\/embed\/$&\"><\/param><param name=\"allowFullScreen\" value=\"true\"><\/param><param name=\"allowscriptaccess\" value=\"always\"><\/param\><embed src=\"http:\/\/www.hulu.com\/embed\/$&\" type=\"application\/x-shockwave-flash\" allowFullScreen=\"true\"  width=\"512\" height=\"296\"><\/embed><\/object>/g;
    #$msg->{message} =~s/\[hulu]//g;
    #$msg->{message} =~s/\[\/hulu]//g;
    
    # linkify version
    my($author) = &linkify($msg->{author}, $msg->{email});
    #my($author) = ($msg->{author}, $msg->{email});
    
    print qq(<h1 align="left" style="font-size:10pt; font-weight:bold"><hr color="#C1C1C1">$msg->{subject}<br>
<span style="color:#0000FF;font-size:8pt;font-weight:normal">Posted by $msg->{author}: $msg->{nicedate} ($msg->{nicetime}) [MSG ID: $msg->{id}]</font></span></h1>\n); 

   print &smiliefy($msg->{message}), qq(<p>\n);
    
    # only allow follow-ups to the original message
    if ($msg->{thread_id} == 0) {
       print qq(<a name="#post"></a><font size=-1><a id="title" href="reply.cgi?$msg->{id}"><img src="$imgdir/reply.gif" border="0" height="35" width="73" alt="Post A Comment"></a></font><p>\n);
    }
    print qq(</font></font>\n);
}