#!/usr/bin/perl

use CGI qw/:standard/;
use CGI::Carp qw(fatalsToBrowser);
use DBI;
use strict;
use vars qw (%FORM $dbh %cache_template %PARAM);

%PARAM = (

    mailprog => '/usr/sbin/sendmail',
    mailprogparams => "-oi",
    sender => 'www@hobbypromoclub.com',
    to => 'maxisubastas@gmail.com',
    from => 'noresponda@hobbypromoclub.com',

);

Parse();
Conectarse();

$| ++;

Inicio();

sub Inicio {

my $error;
my $buscar_tag = "msg";

if ($FORM{proc} == 1) {

    $FORM{tarjeta} = uc($FORM{tarjeta});

    ### verificar si la tarjeta es válida
    ### y si está libre

    my $tarjeta = Trim($FORM{tarjeta});
    $tarjeta =~ s/\'/\\\'/g;

    my $ocupada = ExecQueryUnRow(" select count(*) from clientes where tarjeta = '$tarjeta' and fecha_registro is not null and t1 <> '' ");
    my $existe = ExecQueryUnRow(" select count(*) from clientes where tarjeta = '$tarjeta' ");
    my $activa = ExecQueryUnRow(" select activa from clientes where tarjeta = '$tarjeta' ");

    if ($activa eq 'N') {
        $error = "La tarjeta se encuentra desactivada, contactese con su vendedor";
    }
    if (!$existe) {
        $error = "El número de serie ingresado no es válido";
    }
    if ($ocupada) {
        $error = "La tarjeta ya fue registrada";
    }
    if (!$error) {
        RegistrarTarjeta();
    }
    else {
        $buscar_tag = "";
    }

}

my @exportar = qw (tarjeta nombre email telefono direccion cp localidad);
my $templatefile = "template_registro.htm";
my %namespace = (
    ERROR => $error,
        );

Template($templatefile,\%namespace,\@exportar,$buscar_tag);
exit;

}

sub RegistrarTarjeta {

my $buscar_tag;
my $now = time();
my $clave;

my @random = ("A"..."Z");
for (my $i=0;$i < 4;$i++) {
    my $rand2 = (int(rand(27)) + 1);
    $clave .= $random[$rand2];
}

my @campos = qw (tarjeta nombre email telefono direccion cp localidad);
my $tarjeta = uc($FORM{tarjeta});
my $from = qq~$FORM{nombre} <$FORM{email}>~;
my $datos = \%FORM;

foreach (@campos) {
    $FORM{$_} = Trim($FORM{$_});
    $FORM{$_} =~ s/\'/\\\'/g;
}

$FORM{suscripcion} = 'N' if (!$FORM{suscripcion});

my $q = qq~update clientes set
nombre = '$FORM{nombre}',
clave = '$clave',
direccion = '$FORM{direccion}',
cp = '$FORM{cp}',
localidad = '$FORM{localidad}',
telefono = '$FORM{telefono}',
email = '$FORM{email}',
nifocif = '$FORM{suscripcion}',
t1 = '$now',
fecha_registro = now()
where
tarjeta = '$tarjeta'
~;

ExecQuery($q);

### enviar el mensaje al cliente y al administrador
EnviarMailAdmin($tarjeta,$from,$clave,$datos);
EnviarMailCliente($tarjeta,$datos,$clave);

### salir a la plantilla

my @exportar = qw (tarjeta nombre email telefono direccion cp localidad);

foreach (@exportar) {
    $FORM{$_} = $datos->{$_};
}

my $templatefile = "template_registro_listo.htm";
my %namespace = (
    TARJETA => $tarjeta,
    CLAVE => $clave,
        );

Template($templatefile,\%namespace,\@exportar,$buscar_tag);
exit;

}

sub EnviarMailCliente {

my $tarjeta = shift;
my $datos = shift;
my $clave = shift;

my $subject = "Nuevo Registro Tarjeta $tarjeta";

open (MAIL,"|$PARAM{mailprog} $PARAM{mailprogparams} -t -f $PARAM{sender}");

print MAIL "To: $datos->{email}\n";
print MAIL "From: HobbyPromoClub <$PARAM{from}>\n";
print MAIL "Subject: $subject\n";
print MAIL 'Content-Type: text/plain; charset=iso-8859-1\n\n';
print MAIL qq~Gracias por Registrarse a HOBBY PROMO CLUB.

Recuerde visitar nuestro sitio Web quincenalmente

Datos ingresados:

Nombre: $datos->{nombre}
N. de Tarjeta: $tarjeta
Clave de Ingreso: $clave
Email: $datos->{email}
Teléfono: $datos->{telefono}
Dirección: $datos->{direccion}
Código Postal: $datos->{cp}
Población: $datos->{localidad}

Recuerde que puede cambiar estos datos en el Área de Clientes.
ingresando a http://www.hobbypromoclub.com/

~;

close MAIL;

}

sub EnviarMailAdmin {

my $tarjeta = shift;
my $from = shift;
my $clave = shift;
my $datos = shift;

my $subject = "(Hobby) Nuevo Registro Tarjeta HobbyPromoclub $tarjeta";

open (MAIL,"|$PARAM{mailprog} $PARAM{mailprogparams} -t -f $PARAM{sender}");

print MAIL "To: $PARAM{to}\n";
print MAIL "From: $from\n";
print MAIL "Subject: $subject\n";
print MAIL "Content-Type: text/plain; charset=iso-8859-1\n\n";
print MAIL "Aviso de registro de tarjeta\n";
print MAIL "nro de serie $tarjeta\n";
print MAIL "se le asignó la clave $clave\n";
print MAIL qq~ .



Datos ingresados:

Nombre: $datos->{nombre}
N. de Tarjeta: $tarjeta
Clave de Ingreso: $clave
Email: $datos->{email}
Teléfono: $datos->{telefono}
Dirección: $datos->{direccion}
Código Postal: $datos->{cp}
Población: $datos->{localidad}

~;

close MAIL;

}

sub ExecQuery {

my ($q) = @_;

my $sth = $dbh->prepare($q) || die SqlError("$!<br>$DBI::errstr<br>$q");
$sth->execute() || die SqlError("$!<br>$DBI::errstr<br>$q");
$sth->finish;

}

sub ExecQueryUnRow {

my ($q,$columna) = @_;

my $h = $dbh->prepare($q) || die SqlError("$!<br>$DBI::errstr<br>$q");
$h->execute() || die SqlError("$!<br>$DBI::errstr<br>$q");

my %r;
my @devolver;
my $unica;
my @c = @{ $h->{NAME_lc} };

$h->bind_columns( \( @r{ @{$h->{NAME_lc} } } ));

$h->fetch;

$h->finish;

if ($columna) {

    return $r{"$columna"};

}

for (my $n = 0; $n < $h->{NUM_OF_FIELDS}; $n++) {
    $unica = $r{$c[$n]};
    push (@devolver, $r{$c[$n]});
}

my $cant_elem = @devolver;

if ($cant_elem > 1) {
    return @devolver;
}
else {
    return $unica;
}

}

sub Template {

my ($templatefile,$r_namespace,$export,$reemplazar) = @_;
my ($template,$solapas,$id_raiz,$opciones);

if (!open(TEMPLATE,"$templatefile")) {

    print "Content-type: text/html\n\n";
    print qq~<font face="arial">No puedo abrir la plantilla <b>$templatefile</b><br>$!</font>~;
    exit;

}
else {
    {
        local($/) = undef;
        $template = <TEMPLATE>;
    }
    close(TEMPLATE);
}

foreach (@{$export}) {
    $r_namespace->{uc($_)} = SafeHTML($FORM{$_});
}

if ($reemplazar) {

    my @reemplazos;

    if ($reemplazar =~ /\,/) {
        @reemplazos = split (/\,/, $reemplazar);
    }
    else {
        push (@reemplazos,$reemplazar);
    }

    foreach (@reemplazos) {

        if ($_) {
            $r_namespace ->{uc($_)} =~ s/\$([A-Z_0-9]+)/$r_namespace->{$1}/g;
            $template =~ s/(.*)(<!--.*(<$_>))(.*)((<\/$_>).-->)(.*)/$1 $r_namespace->{uc($_)} $7/sm;
        }
    }
}

$template =~ s/\$([A-Z_0-9]+)/$r_namespace->{$1}/g;

print "Content-type: text/html\n\n";
print $template;
return;

}


sub ExtraerDesdeTemplate {

my ($buscar,$template) = @_;

my $output;

if ($cache_template{$template}) {
    $output = $cache_template{$template};
}
else {

    open(TEMPLATE,"$template") || die "$! $template";
    {
        local($/) = undef;
        $output = <TEMPLATE>;
    }
    close(TEMPLATE);

    $cache_template{$template} = $output;

}

$output =~ s/(.*)(<!--.*(<$buscar>).-->)(.*)(<!--.*(<\/$buscar>).-->)(.*)/$4/sm;

return $output;

}

sub Conectarse {

my $database = "hobbypro_noticias";
my $username = "hobbypro_promocl";
my $password = "qwerty123456";

my $DSN = "DBI:mysql:database=$database;host=";

$dbh = DBI->connect("$DSN", "$username", "$password", {
        RaiseError => 1,
        PrintError => 1,
        AutoCommit => 1
        }
);

}

sub Parse {

%FORM = ();

my $form = new CGI;
my $params = $form->Vars;

foreach (keys %{$params}) {
    $FORM{$_} = $params->{$_};
}

}

sub Trim {

my $txt = shift;

$txt =~ s/^\s+//g;
$txt =~ s/\s+$//g;

return $txt;

}

sub SafeHTML {

my $string = shift;

### colocar todos los escapes html acá

### el & antes que todo

$string =~ s/\&/&amp;/g;

### el resto

$string =~ s/\"/\&quot;/gsm;
$string =~ s/\´/\&acute;/gsm;
$string =~ s/\õ/\&otilde;/gsm;
$string =~ s/\ö/\&ouml;/gsm;
$string =~ s/\ø/\&oslash;/gsm;
$string =~ s/\œ/\&oelig;/gsm;
$string =~ s/\š/\&scaron;/gsm;
$string =~ s/\ù/\&ugrave;/gsm;
$string =~ s/\ú/\&uacute;/gsm;
$string =~ s/\û/\&ucirc;/gsm;
$string =~ s/\ü/\&uuml;/gsm;
$string =~ s/\ý/\&yacute;/gsm;
$string =~ s/\þ/\&thorn;/gsm;
$string =~ s/\ÿ/\&yuml;/gsm;
$string =~ s/\à/\&agrave;/gsm;
$string =~ s/\á/\&aacute;/gsm;
$string =~ s/\â/\&acirc;/gsm;
$string =~ s/\ã/\&atilde;/gsm;
$string =~ s/\ä/\&auml;/gsm;
$string =~ s/\å/\&aring;/gsm;
$string =~ s/\æ/\&aelig;/gsm;
$string =~ s/\ç/\&ccedil;/gsm;
$string =~ s/\è/\&egrave;/gsm;
$string =~ s/\é/\&eacute;/gsm;
$string =~ s/\ê/\&ecirc;/gsm;
$string =~ s/\ë/\&euml;/gsm;
$string =~ s/\ì/\&igrave;/gsm;
$string =~ s/\í/\&iacute;/gsm;
$string =~ s/\î/\&icirc;/gsm;
$string =~ s/\ï/\&iuml;/gsm;
$string =~ s/\ð/\&eth;/gsm;
$string =~ s/\ñ/\&ntilde;/gsm;
$string =~ s/\ò/\&ograve;/gsm;
$string =~ s/\ó/\&oacute;/gsm;
$string =~ s/\ô/\&ocirc;/gsm;
$string =~ s/\Ñ/\&Ntilde;/gsm;
$string =~ s/\Ò/\&Ograve;/gsm;
$string =~ s/\Ó/\&Oacute;/gsm;
$string =~ s/\Ô/\&Ocirc;/gsm;
$string =~ s/\Õ/\&Otilde;/gsm;
$string =~ s/\Ö/\&Ouml;/gsm;
$string =~ s/\Ø/\&Oslash;/gsm;
$string =~ s/\Œ/\&OElig;/gsm;
$string =~ s/\Š/\&Scaron;/gsm;
$string =~ s/\Ù/\&Ugrave;/gsm;
$string =~ s/\Ú/\&Uacute;/gsm;
$string =~ s/\Û/\&Ucirc;/gsm;
$string =~ s/\Ü/\&Uuml;/gsm;
$string =~ s/\Ý/\&Yacute;/gsm;
$string =~ s/\Ÿ/\&Yuml;/gsm;
$string =~ s/\Þ/\&THORN;/gsm;
$string =~ s/\À/\&Agrave;/gsm;
$string =~ s/\Á/\&Aacute;/gsm;
$string =~ s/\Â/\&Acirc;/gsm;
$string =~ s/\Ã/\&Atilde;/gsm;
$string =~ s/\Ä/\&Auml;/gsm;
$string =~ s/\Å/\&Aring;/gsm;
$string =~ s/\Æ/\&AElig;/gsm;
$string =~ s/\Ç/\&Ccedil;/gsm;
$string =~ s/\È/\&Egrave;/gsm;
$string =~ s/\É/\&Eacute;/gsm;
$string =~ s/\Ê/\&Ecirc;/gsm;
$string =~ s/\Ë/\&Euml;/gsm;
$string =~ s/\Ì/\&Igrave;/gsm;
$string =~ s/\Í/\&Iacute;/gsm;
$string =~ s/\Î/\&Icirc;/gsm;
$string =~ s/\Ï/\&Iuml;/gsm;
$string =~ s/\Ð/\&ETH;/gsm;
$string =~ s/\¢/\&cent;/gsm;
$string =~ s/\€/\&euro;/gsm;
$string =~ s/\£/\&pound;/gsm;
$string =~ s/\¥/\&yen;/gsm;
$string =~ s/\©/\&copy;/gsm;
$string =~ s/\®/\&reg;/gsm;
$string =~ s/\™/\&trade;/gsm;
$string =~ s/\‰/\&permil;/gsm;
$string =~ s/\µ/\&micro;/gsm;
$string =~ s/\·/\&middot;/gsm;
$string =~ s/\•/\&bull;/gsm;
#$string =~ s/\…/\&hellip;/gsm;
#$string =~ s/\'/\&prime;/gsm;
#$string =~ s/\?/\&Prime;/gsm;
$string =~ s/\§/\&sect;/gsm;
$string =~ s/\¶/\&para;/gsm;
$string =~ s/\ß/\&szlig;/gsm;
$string =~ s/\‹/\&lsaquo;/gsm;
$string =~ s/\›/\&rsaquo;/gsm;
$string =~ s/\«/\&laquo;/gsm;
$string =~ s/\»/\&raquo;/gsm;
$string =~ s/\‘/\&lsquo;/gsm;
$string =~ s/\’/\&rsquo;/gsm;
$string =~ s/\“/\&ldquo;/gsm;
$string =~ s/\”/\&rdquo;/gsm;
$string =~ s/\‚/\&sbquo;/gsm;
$string =~ s/\„/\&bdquo;/gsm;
$string =~ s/\</\&lt;/gsm;
$string =~ s/\>/\&gt;/gsm;
$string =~ s/\=/\&le;/gsm;
$string =~ s/\=/\&ge;/gsm;
$string =~ s/\–/\&ndash;/gsm;
$string =~ s/\—/\&mdash;/gsm;
$string =~ s/\¯/\&macr;/gsm;
$string =~ s/\¤/\&curren;/gsm;
$string =~ s/\¦/\&brvbar;/gsm;
$string =~ s/\¨/\&uml;/gsm;
$string =~ s/\¡/\&iexcl;/gsm;
$string =~ s/\¿/\&iquest;/gsm;
$string =~ s/\ˆ/\&circ;/gsm;
$string =~ s/\˜/\&tilde;/gsm;
$string =~ s/\°/\&deg;/gsm;
#$string =~ s/\-/\&minus;/gsm;
$string =~ s/\±/\&plusmn;/gsm;
$string =~ s/\÷/\&divide;/gsm;
#$string =~ s/\//\&frasl;/gsm;
$string =~ s/\×/\&times;/gsm;
$string =~ s/\¹/\&sup1;/gsm;
$string =~ s/\²/\&sup2;/gsm;
$string =~ s/\³/\&sup3;/gsm;
$string =~ s/\¼/\&frac14;/gsm;
$string =~ s/\½/\&frac12;/gsm;
$string =~ s/\¾/\&frac34;/gsm;
$string =~ s/\¬/\&not;/gsm;
$string =~ s/\¸/\&cedil;/gsm;
$string =~ s/\ª/\&ordf;/gsm;
$string =~ s/\º/\&ordm;/gsm;
$string =~ s/\†/\&dagger;/gsm;
$string =~ s/\‡/\&Dagger;/gsm;

return $string;

}