#!/usr/bin/perl

### Read query string
#####################

use DBI;
use strict;

my $header = "../include/navbar.i";
my $footer = "../include/footer.i";

### Get query_string data
my %qs;
my $query_string = $ENV{'QUERY_STRING'};
my @qsValues = split(/&/, $query_string);

foreach my $pair (@qsValues){
   (my $name, my $value) = split(/=/, $pair);
   $value =~ tr/+/ /;
   $value =~ s/%([\dA-Fa-f][\dA-Fa-f])/pack ("C", hex ($1))/eg;
   $qs{$name} = $value;
}

print "Content-type: text/html\n\n";

if(!$qs{company_id}) {

  open (HEADER, $header) or print "Cannot open $header";
  while (<HEADER>) { print $_; }
  close (HEADER);

   print qq~
	<td valign=top>
	<img src="/images/connect.gif" width="15" height="17" border="0"><br>
	</td>
	<td valign=top>
	<img src="/images/tool_title.gif" alt="iBoadcast Site Tools" width="452" height="31" border="0"><br><br>

        <table border=0 cellpadding=0 cellspacing=0 width=452>
        <tr>
                <td valign=top width=35>
                <img src="/images/tools_chip.gif" alt="" width="35" height="35" border="0" align="left">
                </td>
                <td>
                <img src="/images/cleardot.gif" width=5 height=1><br>
                </td>
                <td width=100%>
                <font face="arial, helvetica" size=2 color="#FFFFFF">
                <font size=5 color=993300><b>Usage & Sales Stats</b></font><br>
                <br>
              <table border=0>
              <form action=usage_stats.pl>
              <tr><td><font face=arial size=2>Company ID&nbsp;</td> <td><input type=text name=company_id value="" size=5></td></tr>
              <tr><td><font face=arial size=2>Password&nbsp;</td> <td><input type=password name=password value="" ></td></tr><tr><td colspan=2><br><input type=submit value="Show Stats"></td></tr>
               </table></form></table><br>
   ~;

  open (FOOTER, $footer) or print "Cannot open $footer";
  while (<FOOTER>) { print $_; }
  close (FOOTER);

   exit(0);
}

my $db_error;
my $dbquery;
my $dbh = DBI -> connect("DBI:mysql:contactsDB:tsx", "root", "yyuiop[") or die "Can't connect to sql server.  Reason:$DBI::errstr";

### Password Check
##################
my $statement = "SELECT company_id FROM companies WHERE company_id = $qs{company_id} AND password = \"$qs{password}\"";

my $sth = $dbh->prepare ($statement);
if ($DBI::errstr) { $db_error = "Syntax Error: $DBI::errstr"; }
$sth -> execute();
if ($DBI::errstr) { $db_error = "$DBI::errstr"; }
if ($db_error) { print "ERROR! Could retrieve records: $db_error<br>"; }

if($sth->rows == 0) {
	print "Error: Your username and/or password are not correct";
	exit(0);
}
print "<script> document.location = \"/sitetools/stats.shtml?$qs{company_id}\"; </script>";

$sth->finish();
$dbh->disconnect();