#!/usr/bin/perl -wT
# index.cgi
$|=1;
use strict;
use Mail::POP3Client;
use CGI qw(:standard :netscape *table);
use CGI::Carp qw(fatalsToBrowser);
use Untaint;
my $cookie = cookie('WebMail') || 0;
my $user = param('username') || 0;
my $pass = param('password');
my $server = param('server');
if ((!$user || !$pass || !$server) && !$cookie) {
    print redirect("pop-login.html"); exit;
}
if (!$cookie) {
    $cookie = cookie(-name => 'WebMail',
                      -value => "$user $pass $server", 
                      -path => '/'
                     );
    print header(-cookie=>$cookie);
}else{
    print header;
    ($user, $pass, $server) = split(" ",$cookie);
}
$server = untaint(qr(.*), $server);
$user = untaint(qr(^\w{1,8}$), $user);
$pass = untaint(qr(^\w{1,8}$), $pass);
system("/bin/rm","-rf","./$user-$server") unless $user !~ /^\w/;
my $pop = new Mail::POP3Client(HOST   => $server,
				AUTH_MODE => 'PASS');
$pop->User($user);
$pop->Pass($pass);
$pop->Connect() || error($pop->Message);
my $count = $pop->Count;
my %deleted;
if (param('delete')) {
    ($pop->Delete($_) && $deleted{$_}++) foreach (param('mess'));
}
print start_html({-title=>'Web Email Client Example',
                  -BGCOLOR=>'white'}),
p({-align=>'center'},
    start_table({-border=>1,
	     -cellpadding=>4,
	     -cellspacing=>4}),
     Tr,
     td({-align=>'CENTER',-colspan=>4},[strong("Email
                                        Example")]),
     Tr,
     th({-align=>'CENTER'},['Delete','From','Subject','Date']),
     Tr,
     start_form({-method=>'POST',-action=>'index.cgi'}),
     hidden({-name=>'delete',-value=>'1'}))
     ;
my $c = 1;
for my $i (1..$count-1) {
    next if exists $deleted{$i};
    my @head;
    foreach($pop->Head($i)) {
       if(s/^From:\s+//i) {
             $head[0] = qq(<td align=center>
             <input type="checkbox" name="mess" value="$c">
             </td>\n<td align=center>
             <a href="pop-view.cgi?mess=$c">$_</a></td>\n);
       }
       if (s/^Subject:\s+//i) {
             $head[1] = qq(<td align=center>
             <a href="pop-view.cgi?mess=$c">$_</a></td>\n);
        }
       if (/^Date:\s+/i && $_ =~ s/^Date:\s+(.*?)(?:\s+[+-]\d+(?:\s+.*?)?)?$/$1/i) {
             $head[2] = qq(<td align=center>$_</td><tr>\n);
	}
    }
    $c++;
    print @head;
}

$c--;
print td({-colspan=>4,-align=>'LEFT'},
     submit(-value=>'Delete') . " You Have <b>$c</b> Messages"),
     end_form,
     end_table,
     end_html;
$pop->Close;

sub error {
    my $err = shift;
    print h3("There was an error connecting to the server ($err). Please try again"),p,
          a({-href=>'index.cgi'}, "Home");
    exit;
}