#!/usr/bin/perl

#  $Id: message_get.cgi,v 1.38 2000/12/14 00:18:42 bart Exp $

use strict;
use DBI;
use CGI;
use HTML::Entities;
use Image::Size;

my $script_submit = "/cgi-bin/message_submit.cgi";
my $script_review = "/cgi-bin/message_review.cgi";
my $script_attach = "/cgi-bin/message_get_attach.cgi";
my $script_view_s = "/cgi-bin/message_get.cgi";
my $script_view_a = $ENV{SCRIPT_NAME};
my $script_search = "/cgi-bin/search.cgi";

my $fv_short_id         = "id";
my $fv_message_id       = "message";
my $fv_view_reviews     = "view_rate";
my $fv_done             = "done";
my $fv_search_mode      = "sm";
my $fv_search_mode_prev = "smh";
my $fv_special_sort     = "sp";
my $fv_sort_by          = "sb";
my $fv_category         = "category";
my $fv_cutoff_reviews   = "cr";
my $fv_cutoff_rank      = "cs";
my $fv_cutoff_year      = "ccy";
my $fv_cutoff_month     = "ccm";
my $fv_cutoff_day       = "ccd";
my $fv_direction_date   = "oa";
my $fv_return_limit     = "li";
my $fv_start_index      = "si";
my $fv_user_id          = "user_id";
my $fv_user_name        = "uber";
my $fv_search_string    = "q";
my $fv_search_desc      = "sd";
my $fv_message_part     = "part";
my $fv_recipient        = "r";
my $fv_source           = "sr";
my $fv_topten           = "tt";

my $source_upload = 1;
my $source_mail   = 2;

my $file_cache_dir = "/home/bart/www/ubersite.com/cgi-bin/file_cache";

my $sys_is_hiding_ad = 1;

use lib "/home/bart/www/ubersite.com/lib";
use Common;
use Ubersite;
use Category;
use CookieAuth;

&do_everything;


sub do_everything {

    my $string_uri_this = "http://$ENV{HTTP_HOST}/cgi-bin/message_get.cgi";
    $string_uri_this .= "?$ENV{QUERY_STRING}" if( $ENV{QUERY_STRING} );
    my $uri_this = &Common::make_uri( $string_uri_this );

    my $cgi = new CGI;

    my( $user, $authenticated ) = &CookieAuth::determine_user($cgi);

    #  Only send a cookie if the token is just being created
    if( $authenticated && $authenticated != 1 ) {
	#print $cgi->header( -cookie => $authenticated, -last_modified => CGI::expires("now"), -cache_control => "no-cache" );
	print $cgi->header( -cookie => $authenticated, -cache_control => "no-cache" );
    }
    else {
	#print $cgi->header( -last_modified => CGI::expires("now"), -cache_control => "no-cache" );
	print $cgi->header( -cache_control => "no-cache" );
    }

    my $my_uber    = ($cgi->param($fv_user_name) eq $user ? 1 : 0);
    my $my_account = ($cgi->param($fv_recipient) ? 1 : 0);

    my %top_params = ( URI       => $uri_this, 
                       Title     => "Ubersite - Because The Future Is Uber", 
                       Auth      => $authenticated, 
                       User      => $user,
                       MyUber    => $my_uber,
                       MyAccount => $my_account );


    #  Do a quick security sanity check here
    my $recipient = $cgi->param($fv_recipient);
    if( $recipient && lc($recipient) ne lc($user) ) {
      &Ubersite::print_page_top( %top_params );

      print <<EOT;
Sorry, you are only allowed to read <B>your</B> email.<BR><BR>
We apologize for any inconvenience.<BR><BR>
Management
EOT
    }
    else {

	my $message_id = &Common::cgi_param( $cgi, $fv_message_id );
	$message_id =~ s/\D//g;

	my $short_id = &Common::cgi_param( $cgi, $fv_short_id );
	$short_id =~ s/\D//g;

	if( $message_id eq "" && $short_id eq "" ) {
	    &list_all_messages( $cgi, $uri_this, \%top_params );
	}
	else {
	    &list_single_message( $message_id, $short_id, $cgi, $authenticated, $user, $uri_this, \%top_params );
	}
    }

    my $fortune = `/usr/games/fortune homer`;
    &Ubersite::magical_encode($fortune);

    print <<EOT;
<DIV CLASS="main">
<HR>
<BR>
$fortune<BR><BR>
<P CLASS="copyright">
Site and layout &copy; 2007 Ubersite &reg; --
All material copyrighted by its respective copyright holder, dumbass
</P>
</DIV>
@{[&get_analytic()]}
</BODY>
</HTML>
EOT
}


sub print_ad
{
  &print_yahoo_ad();
}


sub print_google_ad
{
  print <<EOT;
<script type="text/javascript"><!--
google_ad_client = "pub-6662536022859814";
google_ad_width = 728;
google_ad_height = 90;
google_ad_format = "728x90_as";
google_ad_type = "text";
google_ad_channel ="";
google_color_border = "A8DDA0";
google_color_bg = "EBFFED";
google_color_link = "0000CC";
google_color_url = "008000";
google_color_text = "6F6F6F";
//--></script>
<script type="text/javascript"
  src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
  </script>
EOT
}


sub print_yahoo_ad
{
  print <<EOT;
<script language="JavaScript" type="text/javascript">
<!--
ctxt_ad_partner = "5204075380";
ctxt_ad_section = "26274";
ctxt_ad_bg = "";
ctxt_ad_width = 468;
ctxt_ad_height = 60;
ctxt_ad_bc = "A8DDA0";
ctxt_ad_cc = "EBFFED";
ctxt_ad_lc = "0000CC";
ctxt_ad_tc = "6F6F6F";
ctxt_ad_uc = "008000";
// -->
</script>
<script language="JavaScript" src="http://ypn-js.overture.com/partner/js/ypn.js" type="text/javascript">
</script>
EOT
}


sub list_single_message 
{
    my $message_id    = shift;
    my $short_id      = shift;
    my $cgi           = shift;
    my $authenticated = shift;
    my $user          = shift;
    my $uri_this      = shift;
    my $top_params_ref = shift;

    my $recipient_ids = $Ubersite::anonymous_id;

    my $this_userinfo;

    if( $authenticated ) 
    {
      $this_userinfo = &Ubersite::getuserinfo($user);
      $recipient_ids .= ',' . $this_userinfo->{id};
    }


    my $sql = <<SQL;
SELECT    m.subject,
          m.id,
          m.short_id,
          m.category,
          m.sender_id,
          m.sender,
          m.recipient_id,
          m.created,
          m.hits,
          m.link_next_id,
          m.link_prev_id,
          m.tot_reviews,
          m.tot_avg_status,
          m.template_code,
          m.has_annotations
FROM      messages m
WHERE     @{[ $message_id ? "m.id = $message_id" : "m.short_id = $short_id" ]}
AND       (m.recipient_id IN ($recipient_ids) OR m.recipient_id IS NULL)
SQL

    my $sth = &Common::dosql( $sql );

    my $hashref = $sth->fetchrow_hashref;

    if( ! $hashref ) {
        &Ubersite::print_page_top( %{$top_params_ref} );
        print "<BR><BR>As far as you are concerned, there is no message $message_id $short_id<BR>\n";
        return;
    }

    if( $hashref->{sender_id} == 614 || $hashref->{sender_id} == 2880 ) {
        &Ubersite::print_page_top( %{$top_params_ref} );
        print "<BR><BR>This message is pending approval<BR>\n";
        return;
    }

    $message_id = $hashref->{id} if !$message_id;

    $top_params_ref->{Title} = &Ubersite::magical_encode( "Ubersite - " . $hashref->{subject}, 1, 1 );

    &Ubersite::print_page_top( %{$top_params_ref}, 
                               NextId => ($hashref->{link_next_id} || ""),
                               PrevId => ($hashref->{link_prev_id} || ""));


    &print_left_bar( $cgi, $uri_this );

    print <<EOT;
<DIV CLASS="main">
EOT

    print <<EOT;
<SPAN CLASS="noprint">
<A HREF="@{[ &Common::cgi_param( $cgi, $fv_done ) || "/" ]}">Click here</A>
to return to the list of messages.
</SPAN>
EOT

    &print_single_message( $message_id, $hashref, $cgi, $this_userinfo );

    print <<EOT;
</DIV>
EOT
}


#  This creates the display for a message by printing out the main
#  message info and then calling print_single_part for each part of the message
sub print_single_message 
{
    my $message_id = shift;
    my $hashref = shift;
    my $cgi = shift;
    my $this_userinfo = shift;

    my $subject = $hashref->{subject};
    &Ubersite::magical_encode( $subject );

    my $category = new Category( $hashref->{category} );
    my $category_bar = $category->get_category_bar;

    my $hits = $hashref->{hits};
    my $hits_string = ($hits ? "<I>($hits hits)</I>" : "");

    print <<EOT;
<H1>$subject $hits_string</H1>
Category: $category_bar<BR><BR>
@{[ &get_single_message_info($hashref,$cgi,$this_userinfo) ]}
<HR>
<BR>
EOT


my $sql = <<SQL;
SELECT p1.message_id,
       p1.number,
       p1.content_type,
       p1.content_name,
       p1.datasource,
       p1.inline,
       IF( content_type like 'text%', content, NULL ) AS content,
       p2.content_length,
       p2.width,
       p2.height,
       p2.is_hidden
FROM   message_parts p1,
       message_parts_aux p2
WHERE  p1.message_id = $message_id 
AND    p1.message_id = p2.message_id
AND    p1.number     = p2.number
ORDER BY number
SQL

    my $sth = &Common::dosql( $sql );

    #  Special handling for UberMadness posts
    if( $hashref->{template_code} eq "UBERMADNESS" ) {

      print <<EOT;
<TABLE BORDER="0" CELLSPACING="1">
<TR>
<TD><IMG SRC="/images/uber_madness.jpg" WIDTH="310" HEIGHT="168"></TD>
<TD>This post is officially part of UberMadness!.<BR><BR>
<A HREF="http://www.ubersite.com/m/92349">Click here for more information on the rules and restrictions.</A></TD>
</TR>
</TABLE>
<HR>
<H1>Entry 1</H1>
EOT
      while( my $hashref = $sth->fetchrow_hashref ) {

        #  Part number 2 is the first part of the second entry
        if( $hashref->{number} == 2 ) {
          print <<EOT;
<HR>
<H2>- VS -</H2>
<HR>
<H1>Entry 2</H1>
EOT
        }

        &print_single_part( $hashref );
        print "<BR><BR>\n";
      }


      my $dbh = &Common::dbconnect();

      my $vote_ref;

      #  See if the user has already voted on this matchup
      if( $this_userinfo && $this_userinfo->{id} )
      {
        my $sql = <<SQL;
SELECT dv.vote,
       d.duel_id
FROM   duel_voting dv,
       duels d
WHERE  d.message_id = ?
AND    d.duel_id = dv.duel_id
AND    dv.user_id = ?
SQL
        my $sth = $dbh->prepare($sql);
        $sth->execute( $message_id, $this_userinfo->{id} );
        $vote_ref = $sth->fetchrow_hashref;
        $sth->finish;
      }


      my $voting_expired = 0;
      my $duel_id;

      {
        my $sql = <<SQL;
SELECT now() > d.vote_expires AS vote_expired,
       d.duel_id
FROM   duels d
WHERE  d.message_id = ?
SQL
        my $sth = $dbh->prepare($sql);
        $sth->execute($message_id);
        my $hashref = $sth->fetchrow_hashref;
        $sth->finish;

        $duel_id = $hashref->{duel_id};

        if( $hashref->{vote_expired}) {
          $voting_expired = 1;
        }
      }

#      $voting_expired = 1 if ($this_userinfo && $this_userinfo->{id} == 1);


      #  If the user hasn't voted yet, show the links to vote
      if( !$vote_ref && !$voting_expired ) {
        my $uri_review = &Common::make_uri( $script_review, $fv_message_id => $message_id );

        print <<EOT;
<HR>
<A HREF="$uri_review&vote=1"><FONT SIZE="+1"><B>Vote for Entry 1</B></FONT></A> &nbsp; | &nbsp; <A HREF="$uri_review&vote=2"><FONT SIZE="+1"><B>Vote for Entry 2</B></FONT></A>
EOT
      }
      #  If the user has voted, show their vote and the reviews
      else
      {
        print <<EOT;
<HR>
EOT

        if( $vote_ref ) 
        {
          my $vote = $vote_ref->{vote};
          $vote = ($vote == 1 ? "1" : "2");
          print <<EOT;
<B>You voted for Entry $vote</B><BR>
EOT
        }

        my $sql = <<SQL;
SELECT dv.vote,
       u.user,
       dv.eligible
FROM   duel_voting dv,
       users u
WHERE  dv.duel_id = $duel_id
AND    dv.user_id = u.id
ORDER BY dv.vote,
         u.user
SQL
        my $sth = &Common::dosql($sql);

        my $last_vote;

        my $count_y = 0;
        my $count_a = 0;

        while( my $hashref = $sth->fetchrow_hashref ) {

          if( $last_vote ne $hashref->{vote} ) {

            if( $last_vote ) {
              print "<BR>&nbsp; $count_y eligible votes ($count_a total) *<BR>\n";
            }

            $last_vote = $hashref->{vote};
            print "<BR><B>Entry $last_vote:</B><BR>\n";

            $count_y = 0;
            $count_a = 0;
          }

          my $eligible = $hashref->{eligible};

          $count_y++ if $eligible;
          $count_a++;

          my $color = ($eligible ? "#000000" : "#CCCCCC");

          print "&nbsp; <FONT COLOR=\"$color\">", $hashref->{user}, "</FONT><BR>\n";
        }

        if( $last_vote ) {
          print "<BR>&nbsp; $count_y eligible votes ($count_a total) *<BR>\n";
        }

        $sth->finish;

        print <<EOT;
<BR><BR>
* Eligible votes are those made by users who had either (A) posted 3+ messages OR (B) written 100+ [lowered from 750+] reviews as of the beginning of the UberMadness! competition.
EOT

        print "<HR>\n";
        print "<A NAME=\"uber_reviews\"></A>\n";
        &print_message_reviews( $message_id );
      }
    }

    #  NOT an UberMadness post
    else {

      if( $hashref->{template_code} eq "UBERMADNESS_ENTRY" ) {
        my $sql_matchup = <<SQL;
SELECT m.short_id
FROM   duel_matchups dm,
       duels d,
       messages m
WHERE  dm.message_id = ?
AND    dm.duel_id = d.duel_id
AND    d.message_id = m.id
SQL

        my $dbh = &Common::dbconnect();
        my $sth_matchup = $dbh->prepare($sql_matchup);
        $sth_matchup->execute($message_id);

        if( my $hashref = $sth_matchup->fetchrow_hashref )
        {
          print <<EOT;
<DIV CLASS="special-box">
This post was an official UberMadness! entry.  <A HREF="/m/@{[$hashref->{short_id}]}">Click here to view the original matchup.</A>
</DIV>
<BR><BR>
EOT
        }

        $sth_matchup->finish;
      }


      #  Display any annotations associated with the message
      if( $hashref->{has_annotations} )
      {
        my $sql_select_annotation = <<SQL;
SELECT   style,
         annotation
FROM     message_annotations
WHERE    message_id = ?
ORDER BY seq
SQL

        my $dbh = &Common::dbconnect();
	my $sth_select_annotation = $dbh->prepare($sql_select_annotation);
	$sth_select_annotation->execute($message_id);

	while( my $hashref = $sth_select_annotation->fetchrow_hashref )
	{
          my $annotation = $hashref->{annotation};
	  my $css_class  = $hashref->{style} || "special-box";

	  print <<EOT;
<DIV CLASS="${css_class}">
$annotation
</DIV>
<BR>
EOT
	}

	$sth_select_annotation->finish;
      }


      while( my $hashref = $sth->fetchrow_hashref ) 
      {
        &print_single_part( $hashref );
        print "<BR><BR>\n";

        if( $this_userinfo->{is_uberblessed} )
	{
          use Worthless;

	  my $content_type = $hashref->{content_type};

          if( $content_type =~ /^image/ )
	  {
            my $inline  = $hashref->{inline};
            my $part    = $hashref->{number};

	    my $msg = $inline ? "Click here to turn this image into a link" : "Click here to display this image inline";

	    my $t_inline = $inline ? 0 : 1;

            print <<EOT;
<BR>
<DIV CLASS="special-box">
<A HREF="/cgi-bin/inline_image.cgi?message=${message_id}&part=${part}&inline=${t_inline}">$msg</A>
</DIV>
<BR>
EOT
          }
	}
      }


      print "<HR>\n";

      if( $sys_is_hiding_ad || ($this_userinfo && $this_userinfo->{is_hiding_ads}) )
      {
      }
      else
      {
        &print_ad();
        print "<HR>\n";
      }

      print "<A NAME=\"uber_reviews\"></A>\n";
      &print_message_reviews( $message_id );
    }
}

#  This function is where we fork the processing path based on content type
sub print_single_part {

    my $hashref = shift;

    if( $hashref->{is_hidden} )
    {
      print <<EOT;
<I>[attachment not displayed]</I>
EOT

      return;
    }

    my %partinfo = %$hashref;
    my $type = $partinfo{content_type};
    my $inline = $partinfo{inline};

    #  For plain text, we format it nicely so that it looks the way you think
    #  it should.  Also, links are added to any URLs and email addresses.
    if( $type =~ /^text\/plain/i ) {
	my $body = $partinfo{content};
	my $pre = ($partinfo{datasource} == $source_upload ||
               $partinfo{datasource} == $source_mail);
	&Ubersite::magical_encode( $body, $pre );
	print "<PRE>" if $pre;
	print $body;
	print "</PRE>" if $pre;
    }
    #  HTML text just gets printed out
    elsif( $type =~ /^text\/uberhtml/i ) {
      print $partinfo{content};
    }
    else {

        my $uri_attach = "http://stuff.ubersite.com/$partinfo{message_id}/$partinfo{number}/$partinfo{content_name}";

	#  Images are printed out as image tags
	if( $inline && ( 
            $type =~ /^image\/gif$/i ||
	    $type =~ /^image\/jpeg$/i ||
	    $type =~ /^image\/png$/i ||
	    $type =~ /^image\/x-png$/i ||
	    $type =~ /^image\/pjpeg$/i) ) {

	    my $img_size = &get_size_as_string( $partinfo{content_length} );
	    my $alt_tag = "$partinfo{content_name} ($img_size)";

            my $img_x = $partinfo{width};
            my $img_y = $partinfo{height};

	    print <<EOT;
<IMG SRC="$uri_attach" WIDTH="$img_x" HEIGHT="$img_y" ALT="[$alt_tag]">
EOT
        }
	#  Other types are printed out as links
	else {
	    my $len = $partinfo{content_length};
         
	    my $file_size = &get_size_as_string( $len );

	    my $ctype = $partinfo{content_type} || "unknown";
            my $cname = $partinfo{content_name} || "attachment";
            encode_entities($cname);
	    print <<EOT;
<A HREF="$uri_attach">$cname</A> ($file_size) [$ctype]
EOT
        }
    }
}

sub get_size_as_string {
    my $len = shift;
    my $z = 0;
    my @zabbrs = ("bytes","kB","MB","GB","TB");

    while( $len >= 1024 ) {
	$len = int($len/1024);
	$z++;
    }

    return "$len $zabbrs[$z]";
}


#  Prints all the user reviews for the given message
sub print_message_reviews 
{
    my $message_id = shift;

    print <<EOT;
<H1>User Reviews</H1>
EOT

    my $sql = <<SQL;
SELECT    r.xwhen,
          r.comment,
          r.rank,
          u.user,
          r.anon_name,
          r.anon_email,
          r.user_id,
          r.formatting,
          r.review_id
FROM      message_reviews r
LEFT JOIN users u 
ON        r.user_id    = u.id
WHERE     r.message_id = $message_id
ORDER BY  r.xwhen DESC
SQL

    my $sth = &Common::dosql( $sql );

    my $hashref = $sth->fetchrow_hashref;

    if( !$hashref ) {
	print "<HR>\nNo reviews<BR>\n";
    }
    else {
	do {
	    my %review = %$hashref;
	    my $comment = $review{comment} || "No Comment";

            if( $review{formatting} ) {
              $comment = encode_entities($comment);
            }
            else {
              if( $review{user_id} ) {
                &Ubersite::magical_encode( $comment );
              }
              else {
                &Ubersite::magical_encode( $comment, 0, 1 );
              }
            }

	    my $username = $review{user};
        my $user_info = undef;

        if( $username eq "" ) {
          $username = encode_entities($review{anon_name});

          if( $review{anon_email} ) {
            $username .= " &lt;" . &Ubersite::magical_encode($review{anon_email}) . "&gt;";
          }
          if( $username eq "" ) {
            $username = "Random Joe";
          }

          $username = "<I>$username</I>";
        }
        else {
          my $uri_user = &Common::make_uri( $script_view_a, ($fv_user_id => $review{user_id}) );
          $user_info = "(<A HREF=\"$uri_user\">user info</A>)";
          $username = "<B>$username</B>";
        }

	    print <<EOT;
<A NAME="$review{review_id}"></A>
<HR>
Submitted by $username $user_info at $review{xwhen} (<a href="#$review{review_id}">#</a>)<BR>
Ranking: $review{rank}<BR>
<BR>
@{[$review{formatting} ? "<PRE>": ""]}
$comment
@{[$review{formatting} ? "</PRE>" : "<BR>"]}
EOT
        } while( $hashref = $sth->fetchrow_hashref );
    }

    $sth->finish;
}


#  Print a big list of all the messages that match the search criteria
sub list_all_messages {

    my $cgi = shift;
    my $uri_this = shift;
    my $top_params_ref = shift;


    #  This while hold the user info for the user we are viewing
    my $user_info;

    #  See if the user id parameter is set
    if( $cgi->param($fv_user_id))
    {
      #  Set the user info based on user id
      $user_info = &Ubersite::getuserinfo_meta_id($cgi->param($fv_user_id));
    }
    #  See if the user name parameter is set
    elsif( $cgi->param($fv_user_name))
    {
      #  Set the user info based on user name
      $user_info = &Ubersite::getuserinfo_meta_user($cgi->param($fv_user_name));

      #  Set the user id parameter to get picked up by other conditions that look for it later
      if( $user_info )
      {
        $cgi->param( -name => $fv_user_id, -value => $user_info->{id} );
      }
    }


    #  Set the title differently if we are looking at a user profile page
    if( $user_info )
    {
      $top_params_ref->{Title} = encode_entities( "Ubersite - " . $user_info->{user});
      $top_params_ref->{RSS}   = "http://www.ubersite.com/u/" . $user_info->{user} . "/rss";
    }


    &Ubersite::print_page_top( %{$top_params_ref});

    &print_left_bar( $cgi, $uri_this );

    print <<EOT;
<DIV CLASS="main">
EOT

    &print_my_uber_bar($cgi);

    my $search_mode = $cgi->param($fv_search_mode) || $cgi->param($fv_search_mode_prev);
    my $category_id = $cgi->param($fv_category);

	print <<EOT;
<FORM ACTION="$script_view_a" METHOD="GET">
<INPUT TYPE="HIDDEN" NAME="$fv_search_mode_prev" VALUE="$search_mode">
<INPUT TYPE="HIDDEN" NAME="$fv_recipient" VALUE="@{[$cgi->param($fv_recipient)]}">
EOT

    #  Based on the search mode, print either the simple or advanced form
    if( !$search_mode || $search_mode eq "Simple" )
    {
      &print_simple_search_form($cgi);
    }
    else
    {
      &print_advanced_search_form($cgi);
    }


    print "<DIV CLASS=\"special-box\">\n";

#       print "<B><A HREF=\"http://www.boredatwork.com/\">Bored At Work?</A></B><BR>\n";
#        print "<B><A HREF=\"http://www.ubersite.com/cgi-bin/oscars.cgi\">Fourth Annual Ubersite Oscar Contest</A></B> (Results Are In! <B>Fourteen Perfect Scores</B>!)<BR>\n";
#      print "<B><A HREF=\"http://www.boredatwork.com/\">Bored At Work?</A></B> &nbsp; (<A HREF=\"http://www.ubersite.com/cgi-bin/nfl2003.cgi\">Ubersite Prizeless NFL 2004 Playoff Contest Results Are In!</A> ...the winner is - <A HREF=\"http://www.ubersite.com/cgi-bin/message_get.cgi?user_id=2070\">spedmonkey</A>)<BR>\n";
      print "<B><A HREF=\"http://www.ubersite.com/cgi-bin/nfl2007.cgi\">Ubersite Prizeless NFL 2007 Playoff Contest</A></B> -or- <B><A HREF=\"http://www.boredatwork.com/\">Bored At Work?</A></B><BR>\n";
#      print "<B><A HREF=\"http://www.ubersite.com/cgi-bin/oscars.cgi\">Ubersite Oscars 2006 Contest</A></B> -or- <B><A HREF=\"http://www.boredatwork.com/\">Bored At Work?</A></B><BR>\n";

    print "</DIV>\n";


    if( $user_info )
    {
#      &print_user_reviews($user_info,$cgi);
    }


    my $cache_key = $ENV{QUERY_STRING};
    $cache_key =~ s/\W/_/g;
    $cache_key = "default" if $cache_key eq "";

    my $cache_file = $file_cache_dir . "/messages_$cache_key";

    #  START CACHE CREATION
    if( ! -e $cache_file ) 
    {
      local *STDOUT;
      open( STDOUT, ">$cache_file" );

      #  In a search by category, print category bar at top
      if( $category_id )
      {
        my $category = new Category( $category_id );
        my $category_bar = $category->get_category_bar;
        print "Category: $category_bar<BR><BR>\n";

        my $sub_categories = $category->get_sub_categories;

        #  Print links for subcategories
        if( @$sub_categories ) 
	{
          print "Subcategories:<BR><UL>\n";
          local $_;
          foreach (@$sub_categories) 
	  {
            print $_->get_category_link, "<BR>\n";
          }
          print "</UL>\n";
        }
      }


      my( $order, @clauses ) = &extract_search_criteria( $cgi );
      my @orig_clauses = @clauses;


      if( defined $cgi->param($fv_topten))
      {
        my $sql = &generate_list_sql_for_topten( $cgi->param($fv_topten));

        my $sth = &Common::dosql( $sql );

        my $tt_desc = &get_topten_description($cgi->param($fv_topten));
        print "<H3>", $tt_desc->{description}, "</H3>\n";

        &list_messages_from_sth($sth,$cgi,$uri_this,0,100,0);
        $sth->finish;
        @clauses      = ("0=1");
        @orig_clauses = ("0=1");
      }
      else
      {

        if( !defined $cgi->param($fv_source)) {
          push @clauses, "source = 0";
        }

        #  FIX for join table full
        &Common::dosql( "SET SQL_BIG_TABLES = 1" );


        if( !defined $cgi->param($fv_source) || $cgi->param($fv_source) == 0 )
        {
          my $def_return_limit = 40;
          my $max_return_limit = 500;

          my $start_index = int($cgi->param($fv_start_index));
          my $return_limit = (int($cgi->param($fv_return_limit)) || $def_return_limit);

          $return_limit = $max_return_limit if $return_limit > $max_return_limit;

          my $sql_limit = "$start_index, " . ($return_limit + 40);

          my $sql = &generate_list_sql( $order, $sql_limit, \@clauses );
          my $sth = &Common::dosql( $sql );

          my $is_showing_home = ($ENV{QUERY_STRING} eq "");

          if( $user_info )
	  {
            print "<H3>Labels</H3>\n";

            my $sql_select_tags = <<SQL;
SELECT   tag_name,
         COUNT(*) AS c
FROM     tags t,
         tag_items ti
WHERE    ti.tag_id = t.tag_id
AND      ti.user_id = ?
GROUP BY tag_name
ORDER BY c DESC
LIMIT    10
SQL

            my $tag_name;
	    my $tag_count;

            my $dbh = &Common::dbconnect();

            my $sth_select_tags = $dbh->prepare($sql_select_tags);
            $sth_select_tags->execute($user_info->{id});
            $sth_select_tags->bind_col( 1, \$tag_name );
            $sth_select_tags->bind_col( 2, \$tag_count );

            my $is_empty = 1;

            while( $sth_select_tags->fetch )
            {
	      $is_empty = 0;

              print <<EOT;
<a href="/u/@{[$user_info->{user}]}/l/$tag_name">$tag_name</a> ($tag_count)
EOT
            }

            $sth_select_tags->finish;

            if( $is_empty )
	    {
	      print <<EOT;
This user has not created any labels.
EOT
            }
	    else
	    {
              print <<EOT;
<br><br>
<a href="/u/@{[$user_info->{user}]}/l/">more labels...</a>
EOT
	    }
	  }

          print "<H3>Original Submissions</H3>\n";

          &list_messages_from_sth($sth,$cgi,$uri_this,$start_index,$return_limit,0, $is_showing_home );

          $sth->finish;
        }

        if( $cgi->param($fv_source) == 1 ) {
          my $def_return_limit = 30;
          my $max_return_limit = 500;

          my $start_index = int($cgi->param($fv_start_index));
          my $return_limit = (int($cgi->param($fv_return_limit)) || $def_return_limit);

          $return_limit = $max_return_limit if $return_limit > $max_return_limit;

          my $sql_limit = "$start_index, " . ($return_limit + 1);

          @clauses = @orig_clauses;
          push @clauses, "source = 1";

          my $sql = &generate_list_sql( $order, $sql_limit, \@clauses );
          my $sth = &Common::dosql( $sql );

          print "<h3>Automated Submissions</h3>\n";
          &list_messages_from_sth($sth,$cgi,$uri_this,$start_index,$return_limit,1);

          $sth->finish;
        }


        if( $user_info ) 
        {
          print "<BR><BR><BR><HR>\n";
          print "<H3>Everything you ever wanted to know about ", encode_entities($user_info->{user}), "</H3>\n";
          print "<TABLE BORDER=\"0\">\n";
          print "<TR><TD>User id:</TD><TD>", $user_info->{id}, "</TD></TR>\n";
          print "<TR><TD>Registered on or around:&nbsp;</TD><TD>", $user_info->{registered}, "</TD></TR>\n";
          print "<TR><TD># Messages posted:</TD><TD>", $user_info->{tot_messages}, "</TD></TR>\n";
          print "<TR><TD># Reviews written:</TD><TD>", $user_info->{tot_reviews}, "</TD></TR>\n";
          print "<TR><TD># Times these posts have been reviewed&nbsp;:</TD><TD>", $user_info->{tot_reviewed}, "</TD></TR>\n";
          print "<TR><TD># Hits:</TD><TD>", $user_info->{hits}, "</TD></TR>\n";
          print "<TR><TD>Average rating of all messages:</TD><TD>", $user_info->{tot_avg_status}, "</TD></TR>\n";
          print "</TABLE>\n";

	  print "<BR><A HREF=\"/u/", $user_info->{user}, "/rss\" CLASS=\"rss\">RSS</A><BR>\n";
        }
      }

      close(STDOUT);
    }
    #END CACHE CREATION

    local $/ = undef;
    local *FILE;
    open( FILE, $cache_file );
    my $content = <FILE>;
    close(FILE);
    print $content;


    my $is_hiding_ad = 0;

    if( $top_params_ref->{Auth} )
    {
      my $this_userinfo = &Ubersite::getuserinfo($top_params_ref->{User});

      if( $this_userinfo && $this_userinfo->{is_hiding_ads} )
      {
        $is_hiding_ad = 1;
      }
    }

    if( $sys_is_hiding_ad || $is_hiding_ad )
    {
    }
    else
    {
      print <<EOT;
<HR>
EOT
      &print_ad();
    }

    print <<EOT;
</DIV>
EOT
}


sub print_user_reviews
{
  my $user_info = shift;
  my $cgi       = shift;

  my $sql = <<SQL;
SELECT   m.id,
         m.short_id,
         m.subject,
         m.category,
         m.sender_id,
         m.sender,
         m.created,
         m.tot_reviews,
         m.tot_avg_status,
         m.last_reviewer,
         unix_timestamp() - unix_timestamp(m.last_reviewed) as reviewed_ago,
         r.review_id,
         r.user_id,
         u.user,
         r.xwhen,
	 r.rank,
	 r.comment
FROM     message_reviews r,
         messages m,
         users u
WHERE    r.message_id = m.id
AND      r.user_id = ?
AND      u.id = r.user_id
ORDER BY r.xwhen DESC
LIMIT 5
SQL

  my $dbh = &Common::dbconnect();
  my $sth = $dbh->prepare($sql);
  $sth->execute($user_info->{id});

  print <<EOT;
<H3>@{[$user_info->{user}]}'s Recent Reviews</H3>
EOT

  while( my $hashref = $sth->fetchrow_hashref )
  {
    my $uri_message = "/m/" . $hashref->{short_id};

    my $subject = $hashref->{subject};
    my $review_id = $hashref->{review_id};

    encode_entities($subject);

    my $uri_user = &Common::make_uri( "/cgi-bin/message_get.cgi", ("user_id" => $hashref->{user_id}) );

    my $user_info = "(<A HREF=\"$uri_user\">user info</A>)";
    my $username  = "<B>" . $hashref->{user} . "</B>";

    my $comment = $hashref->{comment} || "No Comment";

    &Ubersite::magical_encode($comment);

    print <<EOT;
<A HREF="${uri_message}#${review_id}">$subject</A> &nbsp;
@{[&get_list_message_info($hashref,$cgi,0)]}
Review submitted by $username $user_info at @{[$hashref->{xwhen}]}<BR>
Ranking: @{[$hashref->{rank}]}<BR><BR>
$comment
<HR>
<BR>
EOT
  }

  $sth->finish;

  print <<EOT;
EOT
}


sub generate_list_sql {
    my $order       = shift;
    my $sql_limit   = shift;
    my $clauses_ref = shift;

    my @clauses = @{$clauses_ref};
    my $where_clause = (@clauses ? "WHERE " . join(" AND ",@clauses) : "");


    return <<SQL;
SELECT    m.short_id,
          m.id,
          m.subject,
          m.category,
          m.sender_id,
          m.sender,
          m.created,
          m.tot_reviews,
          m.tot_reviewers,
          m.tot_avg_status,
          m.last_reviewer,
          unix_timestamp() - unix_timestamp(m.last_reviewed) as reviewed_ago
FROM      messages m
$where_clause
ORDER BY $order 
LIMIT $sql_limit
SQL
}


sub generate_list_sql_for_topten {
    my $topten_id = shift;

    $topten_id = int($topten_id);

    return <<SQL;
SELECT    m.subject,
          m.id,
          m.short_id,
          m.category,
          m.sender_id,
          m.sender,
          m.created,
          m.tot_reviews,
          m.tot_reviewers,
          m.tot_avg_status,
          m.last_reviewer,
          unix_timestamp() - unix_timestamp(m.last_reviewed) as reviewed_ago
FROM      messages m,
          topten_content t
WHERE     m.id=t.message_id
AND       t.id=$topten_id
AND       m.is_vanquished = 0
ORDER BY  t.rank DESC
LIMIT     100
SQL
}


#  This function will use a year, month, and day as integers to create a mysql date.
#  Ex1:  &format_mysql_date(1975,10,2) will result in "1975-10-02"
#  Ex2:  &format_mysql_date(75,10,2)   will result in "0075-10-02"
sub format_mysql_date {
    my ($yr,$mo,$da) = @_;

    return substr( sprintf( "%0.4u", $yr ), 0, 4) . "-" .
           substr( sprintf( "%0.2u", $mo ), 0, 2) . "-" .
           substr( sprintf( "%0.2u", $da ), 0, 2);
}


sub get_search_params_as_hash {
    my $cgi = shift;

    my @params = 
	(
	 $fv_search_mode,
	 $fv_search_mode_prev,
	 $fv_special_sort,
	 $fv_sort_by,
	 $fv_category,
	 $fv_cutoff_reviews,
	 $fv_cutoff_rank,
	 $fv_cutoff_year,
	 $fv_cutoff_month,
	 $fv_cutoff_day,
	 $fv_direction_date,
	 $fv_return_limit,
	 $fv_user_id,
	 $fv_search_string,
	 $fv_search_desc,
	 $fv_recipient
	 );

    my %params;
    local $_;
    foreach (@params) {
	$params{$_} = "";
	$params{$_} = $cgi->param($_);
    };

    return %params;
}

sub get_search_params_as_hash2 {
    my $cgi = shift;

    return ( $fv_search_mode      => $cgi->param($fv_search_mode),
	     $fv_search_mode_prev => $cgi->param($fv_search_mode_prev),
	     $fv_special_sort     => $cgi->param($fv_special_sort),
	     $fv_sort_by          => $cgi->param($fv_sort_by),
	     $fv_category         => $cgi->param($fv_category),
	     $fv_cutoff_reviews   => $cgi->param($fv_cutoff_reviews),
	     $fv_cutoff_rank      => $cgi->param($fv_cutoff_rank),
	     $fv_cutoff_year      => $cgi->param($fv_cutoff_year),
	     $fv_cutoff_month     => $cgi->param($fv_cutoff_month),
	     $fv_cutoff_day       => $cgi->param($fv_cutoff_day),
	     $fv_direction_date   => $cgi->param($fv_direction_date),
	     $fv_return_limit     => $cgi->param($fv_return_limit),
	     $fv_user_id          => $cgi->param($fv_user_id),
	     $fv_search_string    => $cgi->param($fv_search_string),
	     $fv_search_desc      => $cgi->param($fv_search_desc),
	     $fv_recipient        => $cgi->param($fv_recipient) );
}

#  This function takes the CGI object and determines:
#  1)  The db parameter to sort by
#  2)  Various conditions limiting the returned items
sub extract_search_criteria {
    my $cgi = shift;

    my $cut_reviews = int($cgi->param($fv_cutoff_reviews));
    my $cut_avg_status = $cgi->param($fv_cutoff_rank);
    my $cut_created = "'" . &format_mysql_date( $cgi->param($fv_cutoff_year),
						$cgi->param($fv_cutoff_month),
						$cgi->param($fv_cutoff_day) ) . "'";

    my $sort_by = $cgi->param($fv_sort_by) || "created DESC";

    if( $sort_by ne "created DESC" &&
        $sort_by ne "created" &&
        $sort_by ne "tot_avg_status DESC" &&
        $sort_by ne "tot_reviews DESC" &&
        $sort_by ne "hits DESC" &&
        $sort_by ne "last_reviewed DESC" )
    {
      $sort_by = "created DESC";
    }


    my $special = $cgi->param($fv_special_sort);

    if( ! $special ) {
    }
    elsif( $special eq "best_ever" ) {
        $cut_reviews = 40;
	$sort_by = "tot_avg_status DESC, tot_reviews DESC";
    }
    elsif( $special eq "best_week" ) {
        $cut_reviews = 25;
	$sort_by = "tot_avg_status DESC, tot_reviews DESC";
	$cut_created = "FROM_UNIXTIME(UNIX_TIMESTAMP()-7*24*60*60)";
    }
    elsif( $special eq "best_today" ) {
        $cut_reviews = 10;
	$sort_by = "tot_avg_status DESC, tot_reviews DESC";
	$cut_created = "FROM_UNIXTIME(UNIX_TIMESTAMP()-24*60*60)";
    }
    elsif( $special eq "worst_ever" ) {
        $cut_reviews = 40;
	$sort_by = "tot_avg_status, tot_reviews DESC";
    }

    my @clauses = ("m.id != 0");

    if( $cut_reviews ) {
        push @clauses, "tot_reviews >= $cut_reviews";
    }
    if( $cut_avg_status ) {
        push @clauses, "tot_avg_status >= $cut_avg_status";
    }
    if( $cut_created ) {
	my $del = $cgi->param($fv_direction_date) ? "<=" : ">=";
	push @clauses, "m.created $del $cut_created";
    }

    my $category = $cgi->param($fv_category);
    push @clauses, "m.category = $category" if $category;

    my $user_id = $cgi->param($fv_user_id);

    if( $user_id ne "" )
    {
      $user_id = int($user_id);

      if( $user_id )
      {
        push @clauses, "m.sender_id = $user_id";
      }
      else
      {
        push @clauses, "m.sender_id IS NULL";
      }
    }
    else
    {
      push @clauses, "m.is_vanquished = 0";
    }

    my $source_id = $cgi->param($fv_source);
    push @clauses, "m.source = $source_id" if defined $source_id;

    my $recipient_id = $Ubersite::anonymous_id;
    my $recipient = $cgi->param($fv_recipient);
    if( $recipient ) {
	my $user_info = &Ubersite::getuserinfo($recipient);
	$recipient_id = $user_info->{id};
    }

    if( $recipient_id )
    {
      push @clauses, "m.recipient_id = $recipient_id";
    }
    else
    {
      push @clauses, "(m.recipient_id = $recipient_id OR m.recipient_id IS NULL)";
    }

    return ($sort_by, @clauses);
}

sub get_ids_containing {
    my $s = shift;
    $s = &Common::dbquote($_);
    $s =~ s/^\'/\'%/;
    $s =~ s/\'$/%\'/;
    my $sql = "SELECT message_id FROM message_parts WHERE content_type like '%text%' AND content like $s";
    my $sth = &Common::dosql($sql);

    my @ids;
    while( my $hashref = $sth->fetchrow_hashref ) {
	push @ids, $hashref->{message_id};
    }

    return @ids;
}


sub print_left_bar
{
  my $cgi = shift;
  my $uri_this = shift;

  print <<EOT;
<DIV CLASS="bar">
EOT

  &print_madness_box();
  &print_search_box($cgi);
  &print_topten(3,$uri_this);
  &print_topten(10,$uri_this);
  &print_topten(9,$uri_this);
  &print_topten(5,$uri_this);
  &print_topten(8,$uri_this);

  print <<EOT;
</DIV>
EOT
}


sub get_topten_description {
    my $type = shift;

    #  Get the description for the list
    my $sql = "SELECT * FROM topten_desc WHERE id=$type";
    my $sth = &Common::dosql($sql);

    my $hashref;

    #  Set the title for the list
    if( !($hashref = $sth->fetchrow_hashref) ) {
	$hashref->{description} = "Who Knows?";
    }

    $sth->finish;

    return $hashref;
}


#  This will print a top ten list but will first look in the file cache
sub print_topten {
  my $type = shift;

  if( $type == 7 ) {
    &print_topten_raw($type);
    return;
  }

  my $cache_file = "$file_cache_dir/topten_$type";

  if( ! -e $cache_file ) 
  {
    local *STDOUT;
    open( STDOUT, ">$cache_file" );

    if($type == 8) {
      &print_user_topten_raw($type);
    }
    else {
      &print_topten_raw($type,1);
    }

    close(STDOUT);
  }

  local $/ = undef;
  local *FILE;
  open( FILE, $cache_file );
  my $content = <FILE>;
  close(FILE);

  print $content;
}


#  This will print a top ten list in a small table.
#  The identify of the list should be passed as an argument.
sub print_topten_raw {
    my $type = shift;
    my $more = shift;

    my $topten_desc_ref = &get_topten_description($type);

    #  Get all the items in the list
    my $sql = <<EOT;
SELECT topten_content.message_id, 
       messages.subject,
       messages.short_id,
       topten_content.rank
FROM   topten_content,
       messages
WHERE  topten_content.id=$type
AND    topten_content.message_id = messages.id
AND    (messages.recipient_id = 0 OR messages.recipient_id IS NULL)
AND    messages.is_vanquished = 0
ORDER BY rank DESC
LIMIT  10
EOT

    my $sth = &Common::dosql($sql);

    my $content = "<OL CLASS=\"ttl\">";

    #  The max number of things to list
    my $limit = 10;

    my $is_empty = 1;

    #  Go over the returned items and generate a link for each
    while( my $hashref = $sth->fetchrow_hashref ) 
    {
        $is_empty = 0;

        my $uri_message = &create_message_link($hashref);

	my $subject = $hashref->{subject};
	my $full_subject = $subject;

	#  This is the maximum number of viewable characters in a topten item
	my $arbitrary_limit = 29;

	#  If the string is too big, truncate it and add ellipsis
	if( length $subject > $arbitrary_limit ) 
	{
	    $subject = substr($subject,0,$arbitrary_limit-3) . "...";
	}

        #  Hack around subjects that are all caps
        $arbitrary_limit = int( .78 * $arbitrary_limit ) if uc($subject) eq $subject;

	#  If the string is too big, truncate it and add ellipsis
	if( length $subject > $arbitrary_limit ) 
	{
	    $subject = substr($subject,0,$arbitrary_limit-3) . "...";
	}


        #  If the subject contains 18 characters in a row, insert a dash somewhere
        if( $subject =~ /\S{18}/ )
        {
          $subject = substr($subject,0,14) . "- " . substr($subject,14);
        }


	#  Generate a link for this message
#	encode_entities($subject);
#	encode_entities($full_subject);
	&Ubersite::magical_encode($subject,1,1);
	&Ubersite::magical_encode($full_subject,1,1);


        my $datadesc = "";

        {
          #  Add the descriptive info after the item
          my $format = $topten_desc_ref->{format};

          if( $format ) 
          {
            $datadesc = sprintf( $format, $hashref->{rank} );
            encode_entities($datadesc);
          }
        }

        $content .= <<EOT;
<LI> <SPAN><A HREF="$uri_message" TITLE="$full_subject">$subject</A> $datadesc</SPAN></LI>
EOT

        chomp $content;

	#  Exit the loop if we've reached the limit
	last if !--$limit;
    }

    $sth->finish;

    $content .= "</OL>\n";

    if( $more ) 
    {
      my $uri_more = &Common::make_uri( $script_view_a, $fv_topten => $type );
      $content .= "<SPAN CLASS=\"more\"><A HREF=\"$uri_more\">more...</A></SPAN>";
    }


    if( ! $is_empty )
    {
        &print_misc_box( $topten_desc_ref->{description}, $content );
    }
}


#  This will print a top ten list in a small table.
#  The identify of the list should be passed as an argument.
sub print_user_topten_raw {
    my $type = shift;

    my $topten_desc_ref = &get_topten_description($type);

    #  Get all the items in the list
    my $sql = <<EOT;
SELECT topten_content.user_id, 
       users.user,
       users.first_name,
       users.last_name,
       topten_content.rank
FROM   topten_content,
       users
WHERE  topten_content.id=$type
AND    topten_content.user_id = users.id
ORDER BY rank DESC
LIMIT  30
EOT

    my $sth = &Common::dosql($sql);

    my $content = "<OL CLASS=\"ttl\">";

    #  The max number of things to list
    my $limit = 30;

    #  Go over the returned items and generate a link for each
    while( my $hashref = $sth->fetchrow_hashref ) {

      my $user_id  = $hashref->{user_id};
      my $user     = $hashref->{user};
      my $uri_user = "/u/$user";  #&Common::make_uri( $script_view_s, $fv_user_id => $user_id );

      my $fullname = $hashref->{first_name};

      if( $fullname ne "" && $hashref->{last_name} ne "" ) {
        $fullname .= " ";
      }

      $fullname .= $hashref->{last_name};

      $fullname = $user if $fullname eq "";

      my $full_fullname = $fullname;

      #  This is the maximum number of viewable characters in a topten item
      my $arbitrary_limit = 29;

      #  Hack around items that are all caps
      $arbitrary_limit = int( .78 * $arbitrary_limit ) if uc($fullname) eq $fullname;

      #  If the string is too big, truncate it and add ellipsis
      if( length $fullname > $arbitrary_limit )
      {
        $fullname = substr($fullname,0,$arbitrary_limit-3) . "...";
      }

      #  If the name contains 18 characters in a row, insert a dash somewhere
      if( $fullname =~ /\S{18}/ )
      {
        $fullname = substr($fullname,0,12) . "- " . substr($fullname,12);
      }

      #  Generate a link for this message
#      encode_entities($fullname);
#      encode_entities($full_fullname);
      &Ubersite::magical_encode($fullname,1,1);
      &Ubersite::magical_encode($full_fullname,1,1);

      my $datadesc = "";

      {
        #  Add the descriptive info after the item
        my $format = $topten_desc_ref->{format};

        if( $format )
        {
          $datadesc = sprintf( $format, $hashref->{rank} );

          encode_entities($datadesc);
        }
      }

      $content .= <<EOT;
<LI> <SPAN><A HREF="$uri_user" TITLE="$full_fullname">$fullname</A> $datadesc</SPAN></LI>
EOT

      chomp $content;

      #  Exit the loop if we've reached the limit
      last if !--$limit;
    }

    $sth->finish;
    $content .= "</OL>";

    &print_misc_box( $topten_desc_ref->{description}, $content );
}


sub print_misc_box {

    my $title   = shift;
    my $content = shift;

#  print <<EOT;
#<DIV CLASS="box">
#<FIELDSET>
#<LEGEND>$title</LEGEND>
#$content
#</FIELDSET>
#</DIV>
#EOT
    print <<EOT;
<DIV CLASS="box">
<SPAN CLASS="title">$title</SPAN>
$content
</DIV>
EOT

#print <<EOT
#<FIELDSET>
#<LEGEND>$title</LEGEND>
#$content
#</FIELDSET>
#EOT
}

sub print_form_box {
    my $title    = shift;
    my $subtitle = shift;
    my $script   = shift;
    my $boxname  = shift;
    my $boxvalue = shift;
    my %params = @_;

    my $form_content = <<EOT;
<FORM ACTION="$script" METHOD="GET">
${subtitle}:<BR>
EOT

    while( my($k,$v) = each(%params) ) {
        $form_content .= <<EOT;
<INPUT TYPE="HIDDEN" NAME="$k" VALUE="$v">
EOT
    }

    $form_content .= <<EOT;
<INPUT TYPE="TEXT" CLASS="textfield" SIZE="11" NAME="$boxname" VALUE="$boxvalue">
<INPUT TYPE="SUBMIT" CLASS="button" VALUE="Go!"><BR>
<TABLE CELLSPACING="0" BORDER="0">
<TR VALIGN="MIDDLE">
<TD><INPUT TYPE="CHECKBOX" NAME="user_id" VALUE="1"></TD>
<TD>This user only</TD>
</TR>
</TABLE>
</FORM>
EOT

    &print_misc_box( $title, $form_content );
}


sub print_madness_box4 {

  my $html = <<EOT;
<A HREF="/cgi-bin/madness_voting.cgi">UberMadness! Voting</A>
EOT

  &print_misc_box( "UberMadness!", $html );
}


sub print_madness_box {
  my $uri_category = &Common::make_uri( $script_view_a, $fv_category => "23" );

  my $html = <<EOT;
<A HREF="$uri_category">Latest news &amp; entries...</A><BR>
<A HREF="/cgi-bin/scoreboard.cgi">The scoreboard...</A>
EOT

  &print_misc_box( "UberMadness!", $html );
}


sub print_madness_box1 {
  my $uri_category = &Common::make_uri( $script_view_a, $fv_category => "23" );

  my $html = <<EOT;
<A HREF="$uri_category">Latest news &amp; entries...</A><BR>
<A HREF="/cgi-bin/scoreboard.cgi">The scoreboard...</A>
<br><br>
<A HREF="/m/74608">The Winning Entry</A><BR>
by <A HREF="/u/Snark">Snark!</A>
EOT

  &print_misc_box( "UberMadness!", $html );
}

sub print_madness_box2 {
  my $uri_category = &Common::make_uri( $script_view_a, $fv_category => "23" );

  my $html = <<EOT;
<A HREF="$uri_category">Latest news &amp; entries...</A><BR>
<A HREF="/cgi-bin/scoreboard.cgi">The scoreboard...</A>
<br><br>
<A HREF="/m/56283">The Winning Entry</A> by 
<A HREF="/u/Jack_McCallum">Jack_McCallum!</A>
EOT

  &print_misc_box( "UberMadness!", $html );
}


sub print_madness_box3 {
  my $uri_category = &Common::make_uri( $script_view_a, $fv_category => "23" );

  my $html = <<EOT;
<B>Winner: <A HREF="/u/Razor">Razor</A></B><BR>
<A HREF="/m/32650">Winning Entry</A><BR><BR>
<B>Runner up: <A HREF="/u/gascs">gascs</A></B><BR>
<A HREF="/m/32711">Running Up Entry</A><BR><BR>
<A HREF="$uri_category">Latest news &amp; entries...</A><BR>
<A HREF="/cgi-bin/scoreboard.cgi">The scoreboard...</A>
EOT

  &print_misc_box( "UberMadness!", $html );
}


sub print_search_box_google {
  my $form_content = <<EOT;
<FORM ACTION="http://www.google.com/search" METHOD="GET">
<A HREF="http://google.com"><IMG SRC="/google.gif" BORDER="0"></A><BR>
Search for:<BR>
<INPUT TYPE="TEXT" CLASS="textfield" SIZE="11" NAME="q" VALUE="" ACCESSKEY="s">
<INPUT TYPE="HIDDEN" NAME="domains" VALUE="ubersite.com">
<INPUT TYPE="HIDDEN" NAME="sitesearch" VALUE="ubersite.com">
<INPUT TYPE="SUBMIT" CLASS="button" VALUE="Go!"><BR>
</FORM>
EOT

  &print_misc_box( "Search Ubersite", $form_content );
}


sub print_search_box {
    my $cgi = shift;
    my $default = encode_entities( $cgi->param($fv_search_string));
    my $user_id = $cgi->param($fv_user_id);

    $user_id =~ s/\D//g;

    my $form_content = <<EOT;
<FORM ACTION="$script_search" METHOD="GET">
Search for:<BR>
<INPUT TYPE="TEXT" CLASS="textfield" SIZE="11" NAME="q" VALUE="$default" ACCESSKEY="s">
<INPUT TYPE="SUBMIT" CLASS="button" VALUE="Go!"><BR>
EOT

    if( $user_id ) {
      $form_content .= <<EOT;
<TABLE CELLSPACING="0" BORDER="0">
<TR VALIGN="MIDDLE">
<TD><INPUT TYPE="CHECKBOX" NAME="user_id" ID="user_id" VALUE="$user_id"></TD>
<TD><LABEL FOR="user_id">This user only</LABEL></TD>
</TR>
</TABLE>
EOT
    }

    $form_content .= <<EOT;
</FORM>
EOT

    &print_misc_box( "Search Ubersite", $form_content );
}


sub print_affiliate_links {
    my $message_id = shift;

    my $sql = <<SQL;
SELECT * 
FROM affiliates, 
     affiliate_data, 
     media_types 
WHERE affiliate_data.message_id = $message_id 
AND   affiliate_data.aff_id     = affiliates.id 
AND   affiliate_data.media_id   = media_types.media_id
SQL

    my $sth = &Common::dosql($sql);

    while( my $hashref = $sth->fetchrow_hashref ) {
	my $aff_name   = $hashref->{name};
	my $aff_format = $hashref->{format};
	my $aff_data   = $hashref->{aff_data};
	my $media      = $hashref->{media_desc};
	my $aff_image  = $hashref->{image};

	$aff_format =~ s/\$ID/$aff_data/g;

	print <<EOT;
<A HREF="$aff_format">Buy this $media at $aff_name<BR>
<IMG SRC="/images/affs/$aff_image" BORDER="0"></A><BR><BR>
EOT
    }

    $sth->finish;
}


sub print_my_uber_bar {
    my $cgi = shift;
    my $recipient = $cgi->param($fv_recipient);

    return undef unless $recipient;

    my $uri_email  = &Common::make_uri( $script_view_a, $fv_recipient => $recipient );

    print <<EOT;
<B>Account Services</B> - 
<!--<A HREF="files.cgi">Files</A> -->
<A HREF="$uri_email">Email</A> - 
<A HREF="/cgi-bin/calendar.cgi">Calendar</A> -
<A HREF="/cgi-bin/preferences.cgi">Profile</A> -
<A HREF="/cgi-bin/password.cgi">Change Your Password</A>
<BR>
<BR>
EOT
}


sub get_list_message_info {
    return &get_message_info(@_,1);
}

sub get_single_message_info {
    return &get_message_info(@_,0);
}

#  This function exists as a feeble attempt to have one function for two purposes
sub get_message_info {

    my $hashref       = shift;
    my $cgi           = shift;
    my $this_userinfo = shift;
    my $list          = shift;

    my $message_id = $hashref->{id};

    my $from    = $hashref->{sender};
    my $subject = $hashref->{subject};
    &Ubersite::magical_encode( $from );
    &Ubersite::magical_encode( $subject );

    my $uri_review = &Common::make_uri( $script_review, $fv_message_id => $message_id );

    my $auth_icon = 
	( $hashref->{sender_id} ? 
	  "<A HREF=\"/cgi-bin/auth_icon.cgi\"><IMG SRC=\"/images/auth_icon.gif\" WIDTH=\"12\" HEIGHT=\"13\" BORDER=\"0\" ALT=\"[Authenticated]\"></A> &nbsp; " :
	  "" );

    my $x1 = ($list ? "(" : "" );
    my $x2 = ($list ? ")" : "" );
    my $x3 = ($list ? "" : <<EOT );
(<A HREF="$uri_review" TITLE="Rate this item">Rate this item</A>)
EOT
    if( $message_id == 1057030797535621011 ) {
      $x3 = "";
    }

    if( !$list && $hashref->{tot_reviews} ) {
	$x3 .= <<EOT;
(<A HREF="#uber_reviews" TITLE="View all ratings">V</A>)
EOT
    }

    if( !$list && $this_userinfo && $this_userinfo->{id} )
    {
        my $dbh = &Common::dbconnect();

        my $sql_select_tags = <<SQL;
SELECT tags
FROM   tag_user_items
WHERE  user_id = ?
AND    item_type = ?
AND    item_id = ?
SQL
        my $sth_select_tags = $dbh->prepare($sql_select_tags);

        my $tags;

        $sth_select_tags->execute( $this_userinfo->{id}, 1, $message_id );
        $sth_select_tags->bind_col( 1, \$tags );
        $sth_select_tags->fetch;
        $sth_select_tags->finish;


        my $user_tags;
	my $tag_text = "Label this item";

        if( $tags )
	{
	  my $tmp_tags = join( " ", map { my $tmp = $_; $tmp = lc($tmp); $tmp =~ s/[^a-zA-Z0-9\.\-\_]//g; encode_entities($_); "<a href=\"/u/" . $this_userinfo->{user} . "/l/$tmp\">$_</a>"; } split( / /, $tags ) );

          $user_tags = "Your Labels: $tmp_tags";
	  $tag_text  = "Edit";
	}

        encode_entities($tags);


	$x3 .= <<EOT;
<SCRIPT LANGUAGE="JavaScript">
<!--
 function func_show_tag_form()
 {
   try
   {
     var box = document.getElementById('tags');

     if( document.all )
     {
       box.style.left = window.event.clientX + document.body.scrollLeft - 200;
       box.style.top  = window.event.clientY + document.body.scrollTop + 7;
     }

     box.style.display = 'block'; 
     document.getElementById('tagsbox').focus();
   }
   catch (e)
   {

   }
 }

 function func_hide_tag_form()
 {
   try
   {
     document.getElementById('tags').style.display = 'none';
   }
   catch (e)
   {

   }
 }
//-->
</SCRIPT>
$user_tags
(<A HREF="/cgi-bin/label.cgi?message=$message_id" onClick="func_show_tag_form(); return false;" TITLE="$tag_text">$tag_text</A>)
<DIV ID="tags" STYLE="display: none; white-space: no-wrap; position: absolute; left: 400px; z-index: 2; background: #eeeeee; padding: 0px; border: 2px solid #666666;">
<DIV STYLE="text-align: right; padding: 3px 3px 0px 0px;"><A HREF="#" onClick="func_hide_tag_form(); return false;">X</A></DIV>
<DIV STYLE="padding: 0px 15px;">
<FORM ACTION="/cgi-bin/tag.cgi" METHOD="POST">
<INPUT TYPE="HIDDEN" NAME="token" VALUE="@{[$cgi->cookie("token")]}">
<INPUT TYPE="HIDDEN" NAME="message" VALUE="$message_id">
Labels:
<INPUT TYPE="TEXT" NAME="tags" SIZE="25" VALUE="$tags" ID="tagsbox">
<INPUT TYPE="SUBMIT" VALUE="Save">
</FORM>
</DIV>
</DIV>
EOT
    }

    my $x4 = ($list ? "<I>" : "");
    my $x5 = ($list ? "</I>" : "");

    my $user_info = "";
    if( $hashref->{sender_id} ) {

	my $uri_user = &Common::make_uri( $script_view_a, ($fv_user_id => $hashref->{sender_id}) );
	$user_info = "(<A HREF=\"$uri_user\">View user info</A>)";
    }

    my $tot_avg_status = $hashref->{tot_avg_status};

    $tot_avg_status = int($tot_avg_status * 100) * .01;

    my $last_reviewer = "";

    if( defined $hashref->{last_reviewer} ) {
      $last_reviewer = ", last by " . $hashref->{last_reviewer};

      if( defined $hashref->{reviewed_ago} ) {
        my $last_reviewed = $hashref->{reviewed_ago};
        if( $last_reviewed < 90*60 ) {
          my $minutes = int($last_reviewed/60);
          $last_reviewed = " $minutes minute" . ($minutes != 1 ? "s" : "") . " ago";
        }
        elsif( $last_reviewed < 24*60*60 ) {
          my $hours = int($last_reviewed/(60*60));
          $last_reviewed = " $hours hour" . ($hours != 1 ? "s" : "") . " ago";
        }
        elsif( $last_reviewed < 24*60*60*730 ) {
          my $days = int($last_reviewed/(24*60*60));
          $last_reviewed = " $days day" . ($days != 1 ? "s" : "") . " ago";
        }
        else {
          my $years = int($last_reviewed/(24*60*60*365));
          $last_reviewed = " $years year" . ($years != 1 ? "s" : "") . " ago";
        }

        $last_reviewer .= $last_reviewed;
      }
    }

    my $reviews = $hashref->{tot_reviews};
    my $rating = "";

    if( $reviews ) {
      $reviews = "$reviews review" . ($reviews != 1 ? "s" : "");
      $rating = "Rating: $tot_avg_status on $reviews${last_reviewer}";
    }
    else {
      $rating = "no reviews"
    }

    return <<EOT;
${x1}$rating${x2} ${x3}
<BR>
${x4}Submitted by <B>$from</B> $auth_icon $user_info at @{[$hashref->{created}]}<BR>${x5}
EOT
}

sub print_system_image {

    my $image_id   = shift;
    my $message_id = 0;

    my $sql = "SELECT message_id,number,content_type,content_name,content FROM message_parts WHERE message_id=$message_id AND number=$image_id AND content_type like 'image%'";
    my $sth = &Common::dosql( $sql );

    if( my $hashref = $sth->fetchrow_hashref ) {
	&print_single_part( $hashref );
    }
}


sub print_simple_search_form {
    my $cgi = shift;

    my $sp = $cgi->param($fv_special_sort);
    print <<EOT;
<SELECT NAME="$fv_special_sort">
<OPTION VALUE="newest" @{[$sp eq "newest" || !$sp ? "SELECTED" : ""]}> Newest
<OPTION VALUE="best_ever" @{[$sp eq "best_ever" ? "SELECTED" : ""]}> Best Ever
<OPTION VALUE="best_week" @{[$sp eq "best_week" ? "SELECTED" : ""]}> Best This Week
<OPTION VALUE="best_today" @{[$sp eq "best_today" ? "SELECTED" : ""]}> Best Today
<OPTION VALUE="worst_ever" @{[$sp eq "worst_ever" ? "SELECTED" : ""]}> Worst Ever
</SELECT>
<INPUT TYPE="HIDDEN" NAME="$fv_category" VALUE="@{[$cgi->param($fv_category)]}">
<INPUT TYPE="HIDDEN" NAME="$fv_user_id" VALUE="@{[$cgi->param($fv_user_id)]}">
<INPUT TYPE="HIDDEN" NAME="$fv_user_name" VALUE="@{[$cgi->param($fv_user_name)]}">
<INPUT TYPE="SUBMIT" VALUE="Go">
<INPUT TYPE="SUBMIT" NAME="$fv_search_mode" VALUE="Advanced">
</FORM>
EOT
}


sub print_advanced_search_form {
    my $cgi = shift;

    my $sb = $cgi->param($fv_sort_by);
    print <<EOT;
Sorry this layout sucks
<TABLE BORDER="1">
<TR>
 <TD>Number of reviews</TD>
 <TD COLSPAN="2"><INPUT SIZE="4" TYPE="TEXT" NAME="$fv_cutoff_reviews" VALUE="@{[$cgi->param($fv_cutoff_reviews)]}"></TD>
</TR>
<TR>
 <TD>Cutoff rank</TD>
 <TD COLSPAN="2"><INPUT SIZE="4" TYPE="TEXT" NAME="$fv_cutoff_rank" VALUE="@{[$cgi->param($fv_cutoff_rank)]}"></TD>
</TR>
<TR>
 <TD>Cutoff date<BR>(YYYY-MM-DD)</TD>
 <TD>
  <INPUT SIZE="4" TYPE="TEXT" NAME="$fv_cutoff_year" VALUE="@{[$cgi->param($fv_cutoff_year)]}"> -
  <INPUT SIZE="4" TYPE="TEXT" NAME="$fv_cutoff_month" VALUE="@{[$cgi->param($fv_cutoff_month)]}"> -
  <INPUT SIZE="4" TYPE="TEXT" NAME="$fv_cutoff_day" VALUE="@{[$cgi->param($fv_cutoff_day)]}">
 </TD>
 <TD>
  <INPUT TYPE="RADIO" NAME="$fv_direction_date" VALUE="0" @{[!$cgi->param($fv_direction_date) ? "CHECKED" : ""]}>
  After this date<BR>
  <INPUT TYPE="RADIO" NAME="$fv_direction_date" VALUE="1" @{[ $cgi->param($fv_direction_date) ? "CHECKED" : ""]}>
  Before this date
 </TD>
</TR>
<TR>
 <TD>Number to return</TD>
 <TD COLSPAN=2><INPUT SIZE="4" TYPE="TEXT" NAME="$fv_return_limit" VALUE="@{[$cgi->param($fv_return_limit)]}"></TD>
</TR>
<TR>
 <TD>Sort by</TD>
 <TD COLSPAN=2><SELECT NAME="$fv_sort_by">
  <OPTION VALUE="created DESC" @{[$sb eq "created DESC" ? "SELECTED" : ""]}> Newest First
  <OPTION VALUE="created" @{[$sb eq "created" ? "SELECTED" : ""]}> Oldest First
  <OPTION VALUE="tot_avg_status DESC" @{[$sb eq "tot_avg_status DESC" ? "SELECTED" : ""]}> Best First
  <OPTION VALUE="tot_reviews DESC" @{[$sb eq "tot_reviews DESC" ? "SELECTED" : ""]}> Most Reviewed
  <OPTION VALUE="hits DESC" @{[$sb eq "hits DESC" ? "SELECTED" : ""]}> Most Viewed
  <OPTION VALUE="last_reviewed DESC" @{[$sb eq "last_reviewed DESC" ? "SELECTED" : ""]}> Most Recently Reviewed
  </SELECT>
 </TD>
</TR>
<TR>
  <TD>User ID</TD>
  <TD COLSPAN=2><INPUT SIZE="10" TYPE="TEXT" NAME="$fv_user_id" VALUE="@{[$cgi->param($fv_user_id)]}"></TD>
</TR>
<TR>
  <TD>Category ID</TD>
  <TD COLSPAN=2><INPUT SIZE="10" TYPE="TEXT" NAME="$fv_category" VALUE="@{[$cgi->param($fv_category)]}"></TD>
</TR>
<TR>
<TD COLSPAN=3>
<INPUT TYPE="SUBMIT" VALUE="Go">
<INPUT TYPE="SUBMIT" NAME="$fv_search_mode" VALUE="Simple">
</TD>
</TR>
</TABLE>
</FORM>
<BR>
EOT
}


#  From the given statement handle, list all of the messages in standard format
sub list_messages_from_sth {
    my $sth = shift;
    my $cgi = shift;
    my $uri_this = shift;

    #  Index to begin displaying from
    my $start_index = shift;

    #  Maximum number to display
    my $return_limit = shift;

    my $source_id = shift;

    my $filtering = shift;

    my %user_counts = ();

    #  Counter for how many more rows we want to display
    my $rows_remaining = $return_limit;


    my $found_some = 0;
    my $hashref;

    #  Display each message
    while( $hashref = $sth->fetchrow_hashref )
    {
        #  Remove the filtering restriction for UberMadness
        $user_counts{"6690"} = 0;

        next if( $filtering && (++$user_counts{ $hashref->{sender_id}} > 1) );

	next if( $filtering && $hashref->{tot_avg_status} < -1 && $hashref->{tot_reviewers} > 7);

	my $subject = $hashref->{subject};
	my $cat_ref = new Category( $hashref->{category} );
	my %cat = %$cat_ref;

        my $subj_max_len = 130;

        if( length($subject) > $subj_max_len ) {
          $subject = substr($subject,0,$subj_max_len-3) . "...";
        }

	encode_entities( $subject );

        my $uri_message = &create_message_link($hashref);
	my $uri_category = &Common::make_uri( $script_view_a, $fv_category => $cat{ID} );

	my $cat_name = $cat{NAME};
	encode_entities($cat_name);

	print <<EOT;
<A HREF="$uri_category"><IMG SRC="/images/cats/$cat{ICON}" WIDTH="20" HEIGHT="20" ALT="[$cat_name]" TITLE="[$cat_name]" BORDER="0"></A>
<A HREF="$uri_message">$subject</A> &nbsp;
@{[ &get_list_message_info($hashref,$cgi,0) ]}
EOT

        $found_some = 1;

        #  Decrement the counter and if we've reached the limit, then exit the loop
        last if( --$rows_remaining == 0 );
    }

    #  Create a link to the previous page of messages
    if( $start_index ) {
	my $psi = $start_index - $return_limit + 1;
	$psi = 0 if $psi < 0;
	my $uri_prev = &Common::make_uri( $script_view_a, $fv_start_index => $psi,
					  $fv_source => $source_id,
					  &get_search_params_as_hash($cgi) );
	print "<BR>[<A HREF=\"$uri_prev\">Newer Messages</A>] &nbsp;\n";
    }

    #  Create a link to the next page of messages
    if( $filtering || ($hashref && $sth->fetchrow_hashref) ) {
	print "<BR>" if !$start_index;
	my $uri_next = &Common::make_uri( $script_view_a, $fv_start_index => $start_index+$return_limit-1,
					  $fv_source => $source_id,
					  &get_search_params_as_hash($cgi) );
        $uri_next = encode_entities($uri_next);
	print "[<A HREF=\"$uri_next\">Older Messages</A>]\n";
    }

    if( ! $found_some ) {
	print "There were no items that matched your criteria<BR>\n";
    }
}

sub create_message_link {
  my $hashref = shift;

  my $id = $hashref->{short_id} || $hashref->{message_id} || $hashref->{id};
  return "/m/$id";
}


sub get_analytic
{
  &get_google_analytics();
}

sub get_google_analytics
{
  return <<EOT;
<script src="http://www.google-analytics.com/urchin.js" type="text/javascript">
</script>
<script type="text/javascript">
<!--
_uacct = "UA-259438-1";
urchinTracker();
//-->
</script>
EOT
}