#!/usr/bin/perl

#########################################################################
#                                                                       #
#                      ClickBank Member Order                           #
#                                                                       #
# Version 1.0                                Last Update: Feb. 17, 2003 #
#                                                                       #
#########################################################################
#                                                                       #
# Copyright (c) 2003 Internet Express Products                          #
# All Rights Reserved.                                                  #
#                                                                       #
# This software is the confidential and proprietary information of      #
# Internet Express Products. You shall not disclose such Confidential   #
# Information and shall use it only in accordance with the terms of     #
# the license agreement you entered into with Internet Express          #
# Products.                                                             #
#                                                                       #
# Internet Express Products MAKES NO REPRESENTATIONS OR WARRANTIES      #
# ABOUT # THE SUITABILITY OF THE SOFTWARE, EITHER EXPRESSED OR          #
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF       #
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR                 #
# NON-INFRINGEMENT.                                                     #
#                                                                       #
# INTERNET EXPRESS PRODUCTS SHALL NOT BE LIABLE FOR ANY DAMAGES         #
# SUFFERED BY LICENSEE AS A RESULT OF USE.                              #
#                                                                       #
# DISTRIBUTION OF THIS SOFTWARE OR ITS DERIVATIVES IS STRICTLY          #
# PROHIBITED                                                            #
#                                                                       #
# Larry Wagar                                                           #
# http://expressproducts.net                                            #
# webmaster@expressproducts.net                                         #
#                                                                       #
#########################################################################

use CGI::Carp qw/fatalsToBrowser/;

############################################################################
# Configuration Settings
############################################################################

# Full URL to your members area.
# This is used on the final confirmation page to give then a link
# to your members area.
$members_url  = "http://www.allanimedownloads.com/members/index.html";

# This is the Unix path to your .htpasswd file.
# This should match the location of were you set up the .htaccess file to use.
$passwordfile = "./members/.htpasswd";

# Admin email so that they can email you if there is a problem.
$admin        = 'http://www.allanimedownloads.com/contact.php';

# Your ClickBank account name.
$account      = "allanime";

# Your ClickBank product number.
$product_id   = "1";

# Your product description.
$product_desc = "Anime Gold Membership [Sales Price]";

# This should match the secret key that you set up
# in your ClickBank Account
$secret_key   = "TOPO198";

# This is the path to the template file that the script uses
# for the page design. This is a standard Dreamweaver template file
# if you are a Dreamweaver users or you can just edit the html, but
# do not remove this line from the page:
# <!-- #BeginEditable "DATA" -->{DATA}<!-- #EndEditable -->
# This is where the information from this script will be printed.
$template     = "./template.html";

############################################################################
#  End Configuration Settings
############################################################################

$product_desc =~ s/ /_/g;

%form_data = &get_data();

if ($form_data{'username'} ne "")
{
   $username = $form_data{'username'};
   #check if username already exists
   $found = 0;
   open (PASS, "$passwordfile");
   while (<PASS>)
   {
      @data = split(/\:/, $_);
      if ($username eq $data[0])
      {
         $found = 1;
      }
   }
   close (PASS);

   if ($found eq "0")
   {
      $buy_url = "http://www.clickbank.net/sell.cgi?link=$account/$product_id/$product_desc&user=$username";
      print "Location: $buy_url\n\n";
   } else {
      $message = "That username is already taken!";
      &orderform;
   }
} elsif ($form_data{'cbreceipt'} ne "") {
   print "Content-Type: text/html\n\n";
   $valid = &cbValid;
   if ($valid eq "1")
   {
      # Only add if the name is not already in the file
      $found = 0;
      open (PASS, "$passwordfile");
      while (<PASS>)
      {
         @data = split(/\:/, $_);
         if ($form_data{'user'} eq $data[0])
         {
            $found = 1;
         }
      }
      if ($found eq "1")
      {
         &header;
         print qq~
            <p align="center"><font face="Arial">There appears to be a problem adding your to the password file!</font></p>
            <p align="center"><font face="Arial">&quot;That username is now taken&quot;</font></p>
            <p align="center"><font face="Arial">Please use our <a href="$admin"> Contact Form</a> to send us your receipt #$form_data{'cbreceipt'}
            and we will email you back with a username and password.</font></p>
            <p align="center"><font face="Arial">Thank you...</font></p>
         ~;
         &footer;
      } else {

         $password = crypt($form_data{'cbreceipt'}, "YL");
         open (PASSFILE, ">>$passwordfile");
         print PASSFILE "$form_data{'user'}\:";
         print PASSFILE "$password\n";
         close(PASSFILE);

         &header;

         print qq~
            <p align="center"><font face="Arial">Here are your login details:<br>
            <b>Username:</b> $form_data{'user'}<br>
            <b>Password:</b> $form_data{'cbreceipt'} </font></p>
            <p align="center"><font face="Arial">We do not provide replacements if you lose your login informations. Please be careful.</font></p>
            <p align="center"><font face="Arial"><a href="$members_url">Login to
            MEMBERS AREA!</a></font></p>
            <p align="center"><b><font face="Arial">Credit Card will be billed by &quot;CLICKBANK
            / KEYNETICS&quot;.</font></b></p>
         ~;

         &footer;
      }
   } else {
      &header;
      print qq~
         <p align="center"><font face="Arial">There appears to be a problem with your order!</font></p>
         <p align="center"><font face="Arial">Please use our <a href="$admin"> Contact Us</a> form if you need help.</font></p>
         <p align="center"><font face="Arial">Thank you...</font></p>
      ~;
      &footer;
   }
} else {
   &orderform;
}

############################################################
# Order Form
############################################################

sub orderform
{
   print "Content-Type: text/html\n\n";
   &header;
   print qq~
      <p align="center"><font face="Arial" color="#FF0000"><b>$message</b></font></p>
      <form method="POST">
      <p align="center"><font face="Arial">Enter Desired Username:<br>
      </font>
      <input type="text" name="username" size="20" maxlength="12"><br>
      <input type="submit" value="     Continue &gt;&gt;   "></p>
      </form>
   ~;
   &footer;
}

#########################################################################
# Header
#########################################################################

sub header
{
	open (TEMPLATE, "$template") || print "Cant open $template";
	while (<TEMPLATE>)
	{
	   s/\{ImageURL\}/$images/g;
	   if ($_ =~ /\{DATA\}/i){ last; }
	   if (!($_ =~ /\{DATA\}/i)){print $_;}
	}
}

#########################################################################
# Footer
#########################################################################

sub footer
{
	while (<TEMPLATE>)
	{
	   if (!($_ =~ /\{DATA\}/i)){print $_;}
	}
	close (TEMPLATE);
}

############################################################
# Validate
############################################################

sub cbValid
{
   my($q,$rcpt,$time,$item,$cbpop,$xxpop);

  $q='&'.$ENV{'QUERY_STRING'};
  $q=~/\Wcbreceipt=(\w+)/; $rcpt=$1;
  $q=~/\Wtime=(\w+)/;      $time=$1;
  $q=~/\Witem=(\w+)/;      $item=$1;
  $q=~/\Wcbpop=(\w+)/;     $cbpop=$1;

  use Digest::SHA1 qw(sha1_hex);
  $xxpop=uc(substr(sha1_hex("$secret_key|$rcpt|$time|$item"),0,8));

  # print "VALIDATE: $cbpop : $xxpop";

  return 1 if $cbpop eq $xxpop;
  return 0;
}

############################################################
# Get form input
############################################################

sub get_data {
   local($string, $prev);
   if ($ENV{'REQUEST_METHOD'} eq 'GET') {
      $_ = $string = $ENV{'QUERY_STRING'};
      tr/\"~;/_/;
      $string = $_;
   } else {
      read(STDIN, $string, $ENV{'CONTENT_LENGTH'});
      $_ = $string;
      $OK_CHARS='a-zA-Z0-9=&%\n\/_\-\.@';
      tr/\"~;/_/;
      $string = $_;
   }
   @data = split(/&/, $string);
   foreach (@data)
   {
      if ($_ =~ /\=/i)
      {
         split(/=/, $_);
         $_[0] =~ s/\+/ /g;
         $_[0] =~ s/%(..)/pack("c", hex($1))/ge;
         $prev = $_[0];
         $data{"$_[0]"} = $_[1];
      } else {
         $data{"$prev"} .= "\&$_";
      }
   }
   foreach (keys %data)
   {
      $data{"$_"} =~ s/\+/ /g;
      $data{"$_"} =~ s/%(..)/pack("c", hex($1))/ge;
   }
   %data;
}