#!/usr/bin/perl
use strict;
#use lib 'C:\Inetpub\wwwroot\Sites\asp\echoingw\members\login.';
use lib '.';
use MyBoard;
# declare variables
my($msgid, $sth, $rv, $msg, $i, $subject);
my($randomnumber) = time;
# untaint the query string
if ($ENV{QUERY_STRING} =~ /^(\d+)$/) {
$msgid = $1;
} else {
&dienice("$ENV{QUERY_STRING} isn't a valid message number.");
}
&do_header("Access Restricted");
# get the message data
$sth = $dbh->prepare("select *, date_format(date,'%c/%e/%Y %r') as nicedate from messages where id=?") or &dbdie;
$rv = $sth->execute($msgid);
$msg = $sth->fetchrow_hashref;
$subject = $msg->{'subject'};
&do_header("Reply to Message #$msgid: $subject");
print qq(Reply to: $subject
\n);
$subject =~ s/\"/"/g;
print <|
|
|
EndForm
&do_footer;
