#!/usr/bin/perl -w

##########################################################################
# Blosedit.cgi															 #
# Allows editing of Blosxom files while maintaining posting file date.	 #
# Using just one other file for user/password entry, one can root a		 #
# user to a home directory. The use of user flags control visibility of	 #
# subdirectories such as /.settings/ as used in Blosxom 3 and visibility #
# of dot named files such as .htaccess. Old files can be edited while	 #
# maintaining integrity of timestamps. New files can aslo be created.	 #
# Edited files can be saved as draft and then later saved as completed	 #
# Directories or files need to be writable by "www" (or "apache") to	 #
# work.																	 #
#																		 #
# Blosedit is free software. you may redistribute it and/or modify it	 #
# under the terms of the GNU General Public License as published by the	 #
# Free Software Foundation.												 #
# pdr 11/08/04, v1.1.6													 #
##########################################################################

use strict;
use CGI;
use Time::Local;
use File::Find;
#
# <<<<<<<<<<<<<< Edit below for Your setup >>>>>>>>>>>>>>>>>

# as they say, "Location, Location, Location!"

#my $passfile = '/Library/WebServer/CGI-Executables/pssw.txt'; # absolute path to user/password file
my $passfile = '/var/www/cgi-bin/pssw.txt'; # absolute path to user/password file
my $salt ='gh';					# salt for crypt function
my $usesecure = 0; 				# set if you want to use SSL secured cookie
my $Xpiration = '+1d';			# cookie expiration date
my $MAX_SIZE = 50;				# if flag is set, user is not allowed to upload flles larger then this in kilobytes
my $draft = '.tmp';				# draft file extension ig. mysummertrip.txt is saved as mysummertrip.txt.tmp
								# thus preventing blosxom from showing it until it has a valid 'flavour' name
								# also when re-loaded, comes up with non-draft name for normal save

# for more personal style define your own header/footer
# Note, user's header and footer files care not active until log in
my $usr_headerfile ='';			# path is relative to current user's root
my $usr_footerfile ='';			# path is relative to current user's root

# If user's header/footer not defined or possibly doesn't exist then try default (if defined and exists)
my $default_headerfile='';		# must be aboslute path to header
my $default_footerfile='';		# must be aboslute path to footer
my $Use_JavaScript=1;			#set to zero if no Java script wanted

# <<<<<<<<<<<<<< Edit above for Your setup >>>>>>>>>>>>>>>>>

##########################################################################
#				  Password File Format:
# a white-space delimited file with the following on each line
# userid	password	flags	rootdirectory
# userid may be preded by white-space
# if the path to user's root has a subdirectory with white space in the name then you must quote the
# pathname. Single or double quotes ok
# examples:
# admin	bratwurst	0	/var/www/html/data
# betty	boop	3	'/var/www/html/toons only'
# otto	bismark	12	"/var/www/html/prussia 1900"
#
# file flags are decimal summation of flag (bits) values that are set
# if flag is clear then its value is not added (= zero)
# File Invisibility			value = 1	files with names starting with period are not shown
# Directory Invisible		value = 2	directories w/names starting w/period are not shown
# Directory create			value = 4	User cannot create new subdirectories in home folder
# File upload				value = 8	User limited to maximum set file size
# example: betty can not see any dot name files or directories since flag = 3 =1 + 2
# and otto is not allowed to expand beyond his current boundaries by making new subdirectories
# in his root folder named prussia and his upload size is limited 12 = 4 + 8
##########################################################################


#create a new CGI object
my $cgi = new CGI;

my $script=$cgi->script_name;
my $submitted = '';
my $user ='';
my $pass ='';
my $root ='/bad'; 		#use non-existing directory here, if somegoes wrong then will get a open error
my $mydir = '';
my $Cookie = 0;
my $badlogin = 0;
# flags must be set to self bit mask
my $FileInvisible = 1;
my $DirInvisible = 2;
my $DirCreate = 4;
my $LimitUpload = 8;
# misc globals
my ($HtmlPageTitle,  $EditFileName,  $story_title,  $DateComment) = ('', '', '', '');
my ($LoginForm, $FileNavForm, $NewDirForm, $EditForm) = ('', '', '', '');
my ($CurrentDir, $DirList, $FileList, $UploadFile, $Logout) = ('', '', '', '','');
my ($CSS_Header, $JS_Code, $JS_Menu) = ('', '', '');
my ($FileForm, $CurrentPath, $FileName, $FileDate, $FileTime) = ('', '', '', '', '');
my ($StoryTitle, $StoryBody, $EditSubmits, $FileFormEnd) = ('', '', '', '');

#attempt to read the cookie from the clients cache
my $userdata = $cgi->cookie("login");
if ($userdata) {
	$userdata =~ / pw=/;
	$user = $`;
	$pass = $';
	$user =~ / /;
	$mydir = $';
	$user = $`;
	if (ValidateUser()) {
		$Cookie =1;
# user has a valid cookie.
		GetAction();
	}
}
# check if the user has filled in the form. verify their ID/password and issue a cookie
	$submitted = $cgi->param('choose');
if (($submitted) && ($submitted eq 'Login')){
	$user = $cgi->param('user');
	$pass = $cgi->param('pass');
	chomp($user);
	chomp($pass);
	$pass = Encrypt($pass) if ($pass);
	if (ValidateUser()) {
		$Cookie =1;
		HTML_ShowFiles();
	}
	else {
# Let them know that they didn't pass
	$badlogin =1;
	}
}
if (!$Cookie) {
# user has no valid cookie.  Allow them to log in
	HTML_Login();
}

############## HTML Pages and their Forms ##############

sub HTML_Login {
	$LoginForm = qq(<div class="loginbox">
<form action="$script" method="post">
Username:<input type="text" name="user"  size="20" /><br />
Password: <input type="password" name="pass"  size="20" /><br /><br />
<input type="submit" name="choose" value="Login" />
);
	$LoginForm .= qq(<p>Username/Password invalid!</p>\n) if ($badlogin);
	$LoginForm .= qq(</form></div>);

	$HtmlPageTitle = 'Login';
	HTML_Header ($LoginForm);
	HTML_Foot();
}

sub HTML_MkDir {
	$NewDirForm =  qq(<div class="mid">
<form action="$script" method="post">
New Directory: <input type="text" name="new"  value=""size="32" /><br />
<input type="submit" name="choose" value="Create" />
<input type="submit" name="choose" value="Cancel" />
</form></div>);

	$HtmlPageTitle = 'Enter New Directory Name';
	HTML_Header ($NewDirForm);
	HTML_Foot();
}

sub HTML_ShowFiles {
	my $dir = $root.'/'.$mydir;

#directory location header
	$CurrentDir = qq(<div class="dirlocation">Subdirectory = /root$mydir</div>);
# Select Directory form
	$DirList = qq(<div class="dirlist">
<form action="$script" method="post">
 <select name=sname size="10">\n);
	chdir($root);
	find(\&ListDirs, "./");
	$DirList .=  qq(</select><br />
<input type="submit" name="choose" value="Select Directory"><br /><br />);;
	if (!$DirCreate) {
		$DirList .=qq(<input type="submit" name="choose" value="New Directory"><br />
<input type="submit" name="choose" value="Remove Directory">) ;
	}
	$DirList .= qq(</form>\n</div>);

# File List form
	chdir($dir);
	opendir(DIRHANDLE, $dir) || Error( "Can't open ", $dir);
	my @Flist = readdir(DIRHANDLE);
	closedir(DIRHANDLE);

	$FileList = qq(<div class="filelist">
<form method="post" action="$script">
<select name=sname size=10>);
	my $i;
	for($i = 0; $i < @Flist; $i++) {
		if( !-d $Flist[$i] ) {
			$FileList .= '<option value="'.$Flist[$i].'">'.$Flist[$i] if (!( $FileInvisible && ($Flist[ $i ]  =~ /^\./) ))  ;
 		}
	}
	$FileList .= qq(</select><br />
<input type="submit" name="choose" value= "Edit File"><br /><br />
<input type="submit" name="choose" value="New File"><br>
<input type="submit" name="choose" value="Remove File">
</form></div>);
# Upload File form
	$UploadFile = qq(<div class="upload">
<form method="post" action="$script" enctype="multipart/form-data"><br />
Upload: <input type="file" name="upload"  size="60" /><br />
<input type="submit" name="choose" value="Upload" /></form></div>);
	$Logout = qq(<div class="logout"><form method="post" action="$script">
<input type="submit" name="choose" value="Logout" /></form></div>);
	$FileNavForm .= $CurrentDir.$DirList.$FileList.$UploadFile.$Logout;

	$HtmlPageTitle = 'Select File';
	HTML_Header($FileNavForm);
	HTML_Foot();
}

sub HTML_EditFile {
	chdir ($root.$mydir);
	my  @fcontent;
	my ($Sec, $Min, $Hr, $Day, $Mon, $Yr) ;
	if($EditFileName) {
		open (FILEHANDLE, $root.$mydir.'/'.$EditFileName) || Error('Cant open: ', $EditFileName);
		@fcontent = <FILEHANDLE>;
		my $mtime= (stat(FILEHANDLE))[9];
		close(FILEHANDLE);
		$story_title = shift (@fcontent);
		$story_title =~ s/&/&amp;/g;
		$story_title =~ s/\"/&#34;/g;

		($Sec, $Min, $Hr, $Day, $Mon, $Yr) = localtime($mtime);
		$Sec = "0$Sec" if($Sec <10);
		$Min = "0$Min" if($Min <10);
		$Hr = "0$Hr" if($Hr <10);
		$Day = "0$Day" if($Day <10);
		$Mon = "0$Mon" if(++$Mon <10);
		$Yr = $Yr + 1900;
		$EditFileName =~ s/\.$draft\z// ;
	}
	else {
		$EditFileName = 'untitled.txt';
		my $i =0;
		while (( $i < 100) && ((-e $EditFileName) || (-e $EditFileName.'.'.$draft))) { $EditFileName = 'untitled'.++$i.'.txt' }
	}
# EditForm Components
	Set_JSMenu($JS_Menu)  if ($Use_JavaScript);
	$FileName = qq(<b>File Name: </b><input type="text" name="sname" value="$EditFileName" size="30" />);
	$FileDate = qq(<b>Date: </b><input type="text" name="fmonth" value="$Mon" size="2" />&nbsp;/&nbsp;
<input type="text" name="fday" value="$Day" size="2" />&nbsp;/&nbsp;
<input type="text" name="fyear" value="$Yr" size="4" />);
	$DateComment = '&nbsp;enter zero in MM or DD to use current DateTime<br />';
	$FileTime = qq(<p><b>Time: </b><input type="text" name="fhour" value="$Hr" size="2" />&nbsp;:&nbsp;
 <input type="text" name="fmin" value="$Min" size="2" />&nbsp;:&nbsp;
 <input type="text" name="fsec" value="$Sec" size="2" /></p>);
	$CurrentPath = qq(<div class="dirlocation">Subdirectory = /root$mydir</div>\n);
	$FileForm = qq(<form name="editform" action="$script" method="post">);
	$StoryTitle .= qq(<p><b>Title</b><br /><input type="text" name="title" value="$story_title" size="80" /></p>);
	$StoryBody= qq(<p><b>Body</b><br /><textarea name="body" cols="80" rows="16" wrap="virtual">);
	foreach (@fcontent) { s/&/&amp;/g; $StoryBody .= $_; }
	$StoryBody .= qq(</textarea></p>\n);
	$EditSubmits .= qq(<input type="submit" name="choose" value="Save" />
<input type="submit" name="choose" value="Draft" />
<input type="submit" name="choose" value="Cancel" />);
	$FileFormEnd = '</form>';
# ediiting form
	$EditForm = qq($CurrentPath$FileForm<p>$FileName</p><p>$FileDate$DateComment</p>);
	$EditForm .= qq(<p>$FileTime</p><p>$StoryTitle$StoryBody);
	$EditForm .= $JS_Menu.$EditSubmits.$FileFormEnd;

	$HtmlPageTitle ='Edit File';
	HTML_Header($EditForm);
	HTML_Foot();
}

sub HTML_Header {
	if (($HtmlPageTitle ne 'Login') || ($Xpiration eq 'now')) {
# you passed user/password, so here's a cookie for you!
		$userdata = "$user $mydir pw=$pass";
		$Cookie = $cgi->cookie(-name=>'login', -value=>$userdata, -expires=>$Xpiration, -secure=>$usesecure);
		print $cgi->header(-cookie=>$Cookie);
	}
	else {
# blehhhh... no cookie for you
		print $cgi->header;
	}
	SetCSSHead ($CSS_Header);
	Set_JSCode ( $JS_Code) if ($Use_JavaScript && ($HtmlPageTitle eq 'Edit File'));
# get a name of an external header only if it exists
	my $headerfile;
	if ($usr_headerfile && (-e $root.'/'.$usr_headerfile)) {
		$headerfile = $root.'/'.$usr_headerfile;
	}
	elsif ($default_headerfile && (-e $default_headerfile)) {
		$headerfile = $default_headerfile;
	}

	if ($headerfile) {
		open (HTML_FILEHANDLE, $headerfile) || Error('Cant open header file: ', $headerfile);
		my @hcontent = <HTML_FILEHANDLE>;
		close(HTML_FILEHANDLE);
		foreach (@hcontent) {
			s/(\$\w+(?:::)?\w*)/$1/gee;
			print ($_) ;
		}
	}
	else {
		print $CSS_Header;
		print $JS_Code;
		print "</head><body>\n";
		print qq(<div class="container">) if (($HtmlPageTitle eq 'Select File') || ($HtmlPageTitle eq 'Edit File'));
		print $_[0];
		print qq(</div>) if (($HtmlPageTitle eq 'Select File') || ($HtmlPageTitle eq 'Edit File'));
	}
}

sub HTML_Foot {
# get a name of an external footer only if it exists
	my $footerfile = '';
	if ($usr_footerfile  && (-e $root.'/'.$usr_footerfile)) {
		$footerfile = $root.'/'.$usr_footerfile;
	}
	elsif ($default_footerfile && (-e $default_footerfile)) {
		$footerfile = $default_footerfile;
	}

	if ($footerfile ) {
		open (HTML_FILEHANDLE, $footerfile) || Error('Cant open footer file: ', $footerfile);
		my @hcontent = <HTML_FILEHANDLE>;
		close(HTML_FILEHANDLE);
		foreach (@hcontent) { print() }
	}
	else {
		print qq(</body></html>);
	}
}

############## Utility Subs  ##############

sub ValidateUser {
my $results = 0;
if (($user)  && ($pass)) {
# Get User Info from	 password File and check against login or cookie
		open (FILEHANDLE, $passfile) || Error('open', $passfile);
				while  (<FILEHANDLE>) {
# search for user name match at 1st word in line
			last if (/^\s*$user\s/);
		}
		close(FILEHANDLE);
# clear any spaces before matched user name
		s/^\s*//;
		(my $ulogin, my $upass, my $uflags, $root) = split /\s+/;
		(my $temp, $root) = split /[\"\']/  if (/[\"\']/ );
		$upass = Encrypt($upass);
		if (($ulogin eq $user) && ($upass eq $pass)) {
			$FileInvisible &= $uflags;
			$DirInvisible &= $uflags;
			$DirCreate &= $uflags;
			$LimitUpload &= $uflags;
			$results=1;
		}
	}
	return $results;
}

sub Encrypt {
# since the built-in function crypt() will only encode upto 8 characters, double up on its use to support
# passwords upto 16 characters in a way that generate unique pairs of crypt() output with the salt removed.
# Side effect: this does change the value of the varible pass to it.
	my $secstr;
	if ( length($_[0]) > 8 ) {
		$_[0] = $_[0].'LooseLips';
		$secstr = substr($_[0], 8,8);
	}
	else {
		$secstr = $_[0]. 'sinks';
		$_[0] = $_[0]. 'Ships';
	}
	return substr(crypt($_[0], $salt),2,11). substr(crypt($secstr, $salt),2,11);
}

sub GetAction	{
# Evaluate all form data and act upon it
	$submitted = $cgi->param('choose');
	my $option = $cgi->param('sname');
	$EditFileName = $cgi->param('new');
	if ($submitted eq 'New Directory') {
# Open small page to input new directory name
		HTML_MkDir ();
	}
	elsif ($submitted eq 'Create') {
# Have a new directory name, create new directory
		if ($EditFileName) {
			$mydir = $mydir."/".$EditFileName;
			mkdir ($root.$mydir , 0777) || Error ('make directory','(onwership or permissions problem)');
			HTML_ShowFiles ();
		}
	}
	elsif ($submitted eq 'Remove Directory') {
# Delete selected directory
		if (($option ne 'Updir') || !$option) {
			if (rmdir("$root/$mydir/$option") eq 0){
				Warn($option, 'not empty? or permissions problem')
			}
			else {
				HTML_ShowFiles ();
			}
		}
	}
	elsif ($submitted eq 'Select Directory') {
	# open selected directory
		if ($option eq "root") {
			$mydir = '';
		}
		elsif ($option) {
				$mydir = $option;
		}
		HTML_ShowFiles ();
	}
	elsif ($submitted eq 'New File') {
# Create new file for editing
		$EditFileName = '';
		HTML_EditFile ();
	}
	elsif ($submitted eq 'Remove File') {
# delete selected file
		if ($option) {
			unlink("$root/$mydir/$option");
		}
		HTML_ShowFiles ();
	}
	elsif (($submitted eq 'Edit File') && $option) {
# open selected file for editing
		$EditFileName = $option;
		HTML_EditFile ();
	}
	elsif ($submitted eq 'Upload') {
# Upload file, 1st strip input path to filename only
		my $upload = $cgi->param('upload');
		if ($upload) {
			$_ = $upload;
			s/\w:/\//g;		#for Mac OS 9 replace colons with forward slash
			s/\w\\/\//g;	#for Windows replace backslash with forward slash
			s/([^\/\\]+)$//;
			my $filename = $1;
# 2nd add current path to filename and write to
		open(FILEHANDLE,'>',$root.$mydir.'/'.$filename) || Error('Error opening file '," $filename for writing!");
		binmode FILEHANDLE;
		my $i;
		while (read($upload, my $buff,1024)) {
				if ((++$i > $MAX_SIZE) && ($LimitUpload)) {
					$i = -$MAX_SIZE;
					last;
				}
				else {
					print FILEHANDLE $buff;
				}
		}
		close(FILEHANDLE);
		if (($i <= 0) || ((stat ($root.$mydir.'/'.$filename))[7] <= 0)){
				unlink ($root.$mydir.'/'.$filename);
				Error($filename, "exceeded ".-$i." kB max file size or write unsuccessful");
			}
		}
		HTML_ShowFiles();
	}
	elsif (($submitted eq 'Save') || ($submitted eq 'Draft')) {
#  fix filename if draft and evaluate date/time then save edited file
		$option =$option.'.'.$draft if ($submitted eq 'Draft');
		my $filename = $root.$mydir.'/'.$option;
		my $Mon = $cgi->param('fmonth');
		my $Day = $cgi->param('fday');
		my $Yr = $cgi->param('fyear');
		my $Hr = $cgi->param('fhour');
		my $Min = $cgi->param('fmin');
		my $Sec = $cgi->param('fsec');
		my $mtime;
		if (($Mon > 0) && ($Day > 0)) {
			eval {$mtime = timelocal($Sec, $Min, $Hr, $Day, $Mon-1, $Yr) };
			Error ('continue', "invalid Date or Time entry") if $@;
		}
		else {
			$mtime=time();
		}
# save edited file
		my $title = $cgi->param('title');
		my @fcontent = $cgi->param('body');
		open(FILEHANDLE,">$filename") || Error('Error opening file '," $option for writing!");
		print FILEHANDLE "$title\n";
		foreach (@fcontent) { print FILEHANDLE $_ }
		close(FILEHANDLE);
# uopdate user's desired Date/time to file's Date/time
		utime $mtime, $mtime, $filename;
		HTML_ShowFiles();
	}
	elsif ($submitted eq 'Logout') {
# logout by forcing cookie expiration to now
		$Xpiration='now';
		HTML_Login();
	}
	else {
# no cmd so just show file navigation page
		HTML_ShowFiles();
	}
}

sub  ListDirs {
	if (-d $_) {
		my $found = $File::Find::name;
		$found =~ s/\.//;
		$found = 'root' if ($found eq '');
		if (!( $DirInvisible && ($found =~ /\/\./) )) {
			my $opt = '<option value=';
			$opt = '<option selected value=' if ($found eq $mydir);
			$DirList .= qq(  $opt"$found">$found</option>\n);
		}
	}
}

sub Error {
# report fatal errors and exit
	print $cgi->header();
	print $cgi->start_html('Error!');
	print "$_[0]	$_[1]: $! \n";
	print $cgi->end_html;
	exit;
}

sub Warn {
#warn about errors and return
	print $cgi->header();
	print $cgi->start_html('data');
	print "$_[0] $_[1]";
	print $cgi->end_html;
}

sub SetCSSHead {
# set referenced scalar with following html/css code
	$_[0] = qq(<html><head><title>$HtmlPageTitle</title>
<style type="text/css" media="screen">body {background-color:#ffe; }
.loginbox { position:absolute; left:50%; width:300px; margin-top:50px; margin-left:-166px; text-align:left;
padding:15px; border:2px solid #333; background-color:#ffccff; }
.container { width: 700px; border: 1px solid gray; margin: 10px;
margin-left: auto; margin-right: auto; padding: 10px; background-color: #ffc; }
.dirlocation { padding: 5px; margin-bottom: 5px; background-color: #ffe; text-align: center }
.mid { padding: 5px; margin-left: 300px; margin-right: 300px; background-color: #ffc; }
.dirlist { float: left; width: 300px; width: 310px; width: 300px; margin: 0;
margin-right: 5px; padding: 5px; background-color: #ffc; text-align: center; }
.filelist { float: right; width: 300px; width: 310px; width: 300px; margin: 0;
margin-left: 5px; padding: 5px; background-color: #ffc; text-align: center; }
.upload { clear: both; padding: 5px; margin-top: 5px; text-align: center; background-color: #ffd; border: 1px solid gray; }
.logout { clear: both; padding: 5px; margin-top: 5px; text-align: center; background-color: #ffc; }
.menubar { background: #ffc none; color: #000; text-align: left; font: 10px Tahoma, Verdana, Helvetica, Arial;
border-bottom: thin solid #b3b3b3; border-top: thin solid #b3b3b3; padding: 6px 0px 6px 0px; margin-top: -1px;}
.menubar a:link {	color: #000; text-decoration: none; background: #ffc none;
padding: 6px 4px 6px 4px; border-right: thin dotted b3b3b3; border-left: thin dotted b3b3b3; }
.menubar a:hover { color: #000; text-decoration: none; background: #fff none;
padding: 6px 4px 6px 4px; border-right: thin dotted b3b3b3; border-left: thin dotted b3b3b3; }
</style>);
}

sub Set_JSCode {
# set referenced scalar with following html/javascript code
	$_[0] = qq(<script language="javascript" type="text/javascript">
<!--
var url_text      = "Enter the URL";
var webpage_text  = "Enter the name of the link";
var title_text	  = "Optional: Enter a title attribute";
var image_text    = "Enter the image URL";
var image_title	= "Optional: Enter a title for image";
var image_alt	= "Optional: Enter an alternate description";
var email_text    = "Enter the email address";
var email_title   = "Enter the link title (or leave the field empty to use the email address as the title.)";
var enter_text    = "Enter the text you want to format";
var button_0 = 0;
var button_1 = 0;
var button_2 = 0;
var button_3 = 0;
var button_4 = 0;
var button_5 = 0;
var button_6 = 0;
var button_7 = 0;
var button_8 = 0;
var button_9 = 0;
var button_10 = 0;
var button_11 = 0;
var button_12 = 0;
tags  = new Array();
used = new Array();

function nullo()
{
	return;
}

// Clear state
function clear_state()
{
	while (used[0])
	{
		clearState = arraypop(used);
		eval(clearState + " = 0");
	}
}

// Array size
function getarraysize(thearray)
{
	for (i = 0; i < thearray.length; i++)
	{
		if ((thearray[i] == "undefined") || (thearray[i] == "") || (thearray[i] == null))
		{
			return i;
		}
	}
	return thearray.length;
}

// Array push
function arraypush(thearray, value)
{
	thearray[getarraysize(thearray)] = value;
}

// Array pop
function arraypop(thearray)
{
	thearraysize = getarraysize(thearray);
	retval = thearray[thearraysize - 1];
	delete thearray[thearraysize - 1];
	return retval;
}

// Insert single tag
function singleinsert(tagOpen)
{
	eval("document.editform.body" + ".value += tagOpen");
}

// Insert tag
function taginsert(item, tagOpen, tagClose)
{
// Determine which tag we are dealing with
	var which = eval('item.name');
// Add single open tags
	if (eval(which) == 0)
	{
		var result = tagOpen;
		eval("document.editform.body" + ".value += result");
		eval(which + " = 1");
		arraypush(tags, tagClose);
		arraypush(used, which);
	}
	else
	{
// Close tags
		n = 0;
		for (i = 0 ; i < tags.length; i++ )
		{
			if (tags[i] == tagClose)
			{
				n = i;
				while (tags[n])
				{
					closeTag = arraypop(tags);
					eval("document.editform.body" + ".value += closeTag");
				}
				while (used[n])
				{
					clearState = arraypop(used);
					eval(clearState + " = 0");
				}
			}
		}
	}
}

// Prompted tags
function promptTag(which)
{
	if ( ! which)
		return;
	if (which == "link")
	{
		var URL = prompt(url_text, "http://");
		if ( ! URL || URL == 'http://' || URL == null)
			return; 
		var Name = prompt(webpage_text, "");
		var Link = '<a href=/"' + URL + '/">' + Name + '</a>';
	}
	if (which == "email")
	{
		var Email = prompt(email_text,"");
		if ( ! Email || Email == null)
			return;
		var Title = prompt(email_title, "");
		if (Title == "")
			Title = Email;
		var Link = '<a href=/"mailto:' + Email + '\">' + Title + '</a>';
	}
	if (which == "image")
	{
		var Image = prompt(image_text,"http://");
		if ( ! Image || Image == null)
			return;
		var ALT = prompt(image_alt, "");
		var Title = prompt(image_title, "");
		if (Title == "")
			Title = ALT;
		var Link = '<img src=\"' + Image + '" alt=\"' + ALT + '\" title=\"' + Title + '\">';
	}
	eval("document.editform.body" + ".value += Link");
}

// Close all tags
function closeall()
{
	while (tags[0])
	{
		closeTag = arraypop(tags);
		eval("document.editform.body" + ".value += closeTag");
	}
	clear_state();
}

function ShowPreview()
{
 var previewwin=window.open("","Preview","width=600,height=300,scrollbars=yes,resizable=yes,status=0");
    previewwin.document.open();
    previewwin.document.writeln('<html><head><title>Comment Preview</title></head>');
    previewwin.document.writeln('<body bgcolor="#ffffee">');
    previewwin.document.writeln('<div style="text-align: left; font-family: Verdana,Geneva,Arial,Sans-serif;"><b>');
    previewwin.document.writeln(document.editform.title.value);
    previewwin.document.writeln('</b><br>');
    previewwin.document.writeln(document.editform.body.value);
    previewwin.document.writeln('</div><br><a href="javascript:window.close()"><div style="text-align: center;">Close</div></a><br />');
    previewwin.document.writeln('</body></html>');
    previewwin.document.close();
}
//-->
</script>);
}

sub Set_JSMenu {
# set referenced scalar with following html code
	$_[0] = qq(<div class="menubar">
<a href='javascript:nullo()'  name='button_0' onclick='taginsert(this, "<strong>", "</strong>")'> &lt;strong&gt; </a>
<a href='javascript:nullo()'  name='button_1' onclick='taginsert(this, "<em>", "</em>")'> &lt;em&gt; </a>
<a href='javascript:nullo()'  name='button_2' onclick='taginsert(this, "<u>", "</u>")'> &lt;u&gt; </a>
<a href='javascript:nullo()'  name='button_3' onclick='taginsert(this, "<strike>", "</strike>")'> &lt;strike&gt; </a>
<a href='javascript:nullo()'  name='button_4' onclick='taginsert(this, "<p>", "</p>")'> &lt;p&gt; </a>
<a href='javascript:nullo()'  name='button_5' onclick='taginsert(this, "<blockquote>", "</blockqoute>")'> &lt;blockqoute&gt; </a>
<a href='javascript:nullo()'  name='button_6' onclick='taginsert(this, "<pre>", "</pre>")'> &lt;pre&gt; </a>
<a href='javascript:nullo()'  name='button_7' onclick='taginsert(this, "<div>", "</div>")'> &lt;div&gt; </a>
<a href='javascript:nullo()'  name='button_8' onclick='taginsert(this, "<span>", "</span>")'> &lt;span&gt; </a>
<a href='javascript:nullo()'  name='button_9' onclick='taginsert(this, "<ol>", "</ol>")'> &lt;ol&gt; </a>
<a href='javascript:nullo()'  name='button_10' onclick='taginsert(this, "<ul>", "</ul>")'> &lt;ul&gt; </a>
<a href='javascript:nullo()'  name='button_11' onclick='taginsert(this, "<li>", "</li>")'> &lt;li&gt; </a>
<a href='javascript:nullo()'  name='button_12' onclick='taginsert(this, "&amp;lt;", "&amp;gt;")'> &amp;lt; &amp;gt; </a>
<a href='javascript:closeall();' > Close All </a>
</div>
<div class="menubar">
<a href='javascript:singleinsert("<br />")'> &lt;br /&gt; </a>
<a href='javascript:singleinsert("&amp;nbsp;")'> &amp;nbsp; </a>
<a href='javascript:singleinsert("&amp;copy;")'> &copy; </a>
<a href='javascript:singleinsert("&amp;trade;")'> &trade; </a>
<a href='javascript:singleinsert("&amp;deg;")'> &deg; </a>
<a href='javascript:singleinsert("&amp;hellip;")'> &hellip; </a>
<a href='javascript:singleinsert("&amp;plusmn;")'> &plusmn; </a>
<a href='javascript:singleinsert("&amp;#147;")'> &#147; </a>
<a href='javascript:singleinsert("&amp;#148;")'> &#148; </a>
<a href='javascript:singleinsert("&amp;dagger;")'> &dagger; </a>
<a href='javascript:singleinsert("<!-- more -->")'> seemore </a>
<a href='javascript:promptTag("link");' > Link </a>
<a href='javascript:promptTag("image");' > Image </a>
<a href='javascript:promptTag("email");' > Email </a>
<a href='javascript:ShowPreview();'> Preview </a>
</div><br />);
}