###############################################################################
# These are replacement subroutines and new subroutines to be placed in the   #
# html.pl file with the secure password lookup mod.                           #
#                                                                             #
# Use these if you are using the "user-friendly" html.pl file.                #
###############################################################################
###############################################################################
# Replace the following subroutines                                           #
#                                                                             #
###############################################################################

sub html_login_form {
# --------------------------------------------------------
# The login screen.

    $page_title = "Log On";
    &html_page_top;

    $submit_button = "Logon";
    $reset_button = "Cancel";

# < -- Start page text -- >
    print qq|
    <$font>Welcome! You need to have an active account to access $html_title. For
          the demo, you can use userid/passwords: 'admin/admin', 'author/author', 'guest/guest'.<BR>|;
# < -- End page text -->


  if ($auth_signup) {
    print qq|
      If you do not yet have an account, you may <a href="$db_script_url?db=$db_setup&signup_form=1">sign up for one here.</a><BR>|;
  }
  print qq|     
    If you have forgotten your password, you may <a href="$db_script_url?db=$db_setup&lookup_form=1">receive another password here.</a>
    <p>
    <form action="$db_script_url" method="post" name="form1">
      <input type=hidden name="db" value="$db_setup">
      <input type=hidden name="uid" value="$db_uid">      
      <table border=0>
        <tr><td><Font face="Verdana, Arial, Helvetica" Size=2 Color=#003399><b>User ID:</b></FONT></td>
            <td><input type="TEXT" name="userid"></td></tr>
        <tr><td><Font face="Verdana, Arial, Helvetica" Size=2 Color=#003399><b>Password:</b></FONT></td>
            <td><input type="PASSWORD" name="pw"></td></tr>
      </table>            
      <center>
        <input type="SUBMIT" name="login" value="$submit_button"> 
        <INPUT TYPE="SUBMIT" NAME="logoff" VALUE="$reset_button"></center></form>    |;

    &html_page_bottom;
}

sub html_login_failure {
# --------------------------------------------------------
# There was an error logging in. The error message is stored in $message.

    my ($message) = $_[0];
        
    $page_title = "Login Error";
    &html_page_top;

    $submit_button = "Logon";
    $reset_button = "Cancel";

# < -- Start page text -- >
  print qq|
    <$font>Oops, there was a problem logging into the system: <font color=red><b>$message</b></font>.<br><br>
    Please try logging in again, or contact the <a href="mailto:$admin_email">system administrator.</a><BR>|;
# < -- End page text -->

  if ($auth_signup) {
    print qq|
      If you do not yet have an account, you may <a href="$db_script_url?db=$db_setup&signup_form=1">sign up for one here.</a><BR>|;
  }
  print qq|
    If you have forgotten your password, you may <a href="$db_script_url?db=$db_setup&lookup_form=1">receive another password here.</a>
                  <p>
    <form action="$db_script_url" method="post" name="form1">
      <input type=hidden name="db" value="$db_setup">
      <input type=hidden name="uid" value="$db_uid">      
        <table border=0>
          <tr><td><Font face="Verdana, Arial, Helvetica" Size=2 Color=#003399><b>User ID:</b></FONT></td>
              <td><input type="TEXT" name="userid"></td></tr>
         <tr><td><Font face="Verdana, Arial, Helvetica" Size=2 Color=#003399><b>Password:</b></FONT></td>
             <td><input type="PASSWORD" name="pw"></td></tr>
        </table>            
        <center>
          <input type="SUBMIT" name="login" value="$submit_button"> 
          <INPUT TYPE="SUBMIT" NAME="logoff" VALUE="$reset_button"></center></form>    |;

    &html_page_bottom;
}

sub html_admin_display {
# --------------------------------------------------------
# The displays the list of current users.

  my ($message, $user_list, $password, $permissions, $email) = @_;

    $page_title = "User Management";
    &html_page_top;

    $submit_button = "Update/Create User";

# < -- Start page text -- >  
  print qq|
    <p><$font><Font color=red><b>$message</b></font></font></p>
  |;
# < -- End page text -->
  print qq|

    <form action="$db_script_url" method="post">
      <input type=hidden name="db" value="$db_setup">
      <input type=hidden name="uid" value="$db_uid">  
      <input type=hidden name="admin_display" value="1">

      <table border=0>
        <tr><td align=right><$font>User List:</font></td>
            <td>$user_list <input type=submit name=inquire value="Inquire"> 
                           <input type=submit name=delete value="Delete"></td></tr>
            <tr><td align=right><$font>New Username:</font></td>
                <td><input type="text" name="new_username" size="14"></td></tr>
            <tr><td align=right><$font>Change Password:</font></td>
                <td><input type="text" name="password" value="$password" size="14"></td></tr>
            <tr><td align=right><$font>Email Address:</font></td>
                <td><input type="text" name="email" value="$email" size="14"></td></tr>
            <tr><td colspan=2><$font>Permissions:
                    <br>$permissions</font></td></tr>
           </table>
           <P><center><input type=submit value="$submit_button"></center></form><P>
  |; 
  &html_footer; 

    &html_page_bottom;
}

sub html_signup_form {
# --------------------------------------------------------
# This form is displayed for new users who want to create an account.
#       
  my $error = shift;

    $page_title = "Sign up";
    &html_page_top;

    $submit_button = "Create";
    $reset_button = "Cancel";

# < -- Start page text -- >
  print qq|
    <$font>To create your own account, simply enter in your desired username and your email address. 
           Your password will be mailed to you at the address you enter. 
    <p>
  |; 
# < -- End page text -->
                  
  if ($error) { print "<font color=red>$error</font></p>"; } 
    
  print qq|
    <form action="$db_script_url" method="post" name="form1">
      <input type=hidden name="db" value="$db_setup">
      <input type=hidden name="uid" value="$db_uid">      
      <table border=0>
        <tr><td><Font face="Verdana, Arial, Helvetica" Size=2 Color=#003399><b>User ID:</b></FONT></td>
            <td><input type="TEXT" name="userid" value="$in{'userid'}"></td></tr>
        <tr><td><Font face="Verdana, Arial, Helvetica" Size=2 Color=#003399><b>Email address:</b></FONT></td>
            <td><input type="TEXT" name="email" value="$in{'email'}"></td></tr>
      </table>            
      <center>
        <input type="SUBMIT" name="signup" value="$submit_button"> 
        <INPUT TYPE="SUBMIT" NAME="logoff" VALUE="$reset_button"></center></form>    |;

    &html_page_bottom;
}       

sub html_signup_success {
# --------------------------------------------------------
# The user has successfully created a new account.

    $page_title = "Account Created";
    &html_page_top;

    $submit_button = "Logon";
    $reset_button = "Cancel";

# < -- Start page text -- >
  print qq|
    <$font>Your account has been set up! After you receive your password, use your username and password to 
           log in.<p>
  |;
# < -- End page text -->

print qq|
      <form action="$db_script_url" method="post" name="form1">
         <input type=hidden name="db" value="$db_setup">
         <input type=hidden name="uid" value="$db_uid">    
         <table border=0>
           <tr><td><Font face="Verdana, Arial, Helvetica" Size=2 Color=#003399><b>User ID:</b></FONT></td>
               <td><input type="TEXT" name="userid"></td></tr>
           <tr><td><Font face="Verdana, Arial, Helvetica" Size=2 Color=#003399><b>Password:</b></FONT></td>
               <td><input type="PASSWORD" name="pw"></td></tr>
        </table>                
        <center>
          <input type="SUBMIT" name="login" value="$submit_button"> 
          <INPUT TYPE="SUBMIT" NAME="logoff" VALUE="$reset_button"></center></form>    |;

    &html_page_bottom;
}

###############################################################################
# Add the following subroutines to html.pl                                    #
###############################################################################

sub html_lookup_form {
# --------------------------------------------------------
# This form is displayed when users want a new password.
#       
    my $error = shift;

    $page_title = "Get a New Password";
    &html_page_top;

    $submit_button = "Lookup";
    $reset_button = "Cancel";

# < -- Start page text -- >
  print qq|
 <$font>To have a new password sent to you, simply enter the same email address you used when you 
        signed up for your account. Your password will be mailed to you at the address you enter. 
                  <p>
  |; 
# < -- End page text -->
                  
  if ($error) { print "<font color=red>$error</font></p>"; } 
  print qq|
    <form action="$db_script_url" method="post" name="form1">
      <input type=hidden name="db" value="$db_setup">
      <input type=hidden name="uid" value="$db_uid">      
      <table border=0>
        <tr><td><Font face="Verdana, Arial, Helvetica" Size=2 Color=#003399><b>Email address:</b></FONT></td>
            <td><input type="TEXT" name="email" value="$in{'email'}"></td></tr>
      </table>            
      <center>
       <input type="SUBMIT" name="lookup" value="$submit_button"> 
       <INPUT TYPE="SUBMIT" NAME="logoff" VALUE="$reset_button"></center></form>    |;

    &html_page_bottom;
}       

sub html_lookup_success {
# --------------------------------------------------------

    $page_title = "New Password Sent";
    &html_page_top;

    $submit_button = "Logon";
    $reset_button = "Cancel";

# < -- Start page text -- >
  print qq|
  <$font>Your new password has been sent! After you receive your password, use your username and 
         password to log in.<p>
  |;
  # < -- End page text -->
print qq|

  <form action="$db_script_url" method="post" name="form1">
    <input type=hidden name="db" value="$db_setup">
    <input type=hidden name="uid" value="$db_uid">    
    <table border=0>
      <tr><td><Font face="Verdana, Arial, Helvetica" Size=2 Color=#003399><b>User ID:</b></FONT></td>
          <td><input type="TEXT" name="userid"></td></tr>
      <tr><td><Font face="Verdana, Arial, Helvetica" Size=2 Color=#003399><b>Password:</b></FONT></td>
          <td><input type="PASSWORD" name="pw"></td></tr>
    </table>                
    <center>
      <input type="SUBMIT" name="login" value="$submit_button"> 
      <INPUT TYPE="SUBMIT" NAME="logoff" VALUE="$reset_button"></center></form>    |;

    &html_page_bottom;
}