#!/usr/bin/perl
#use File::Copy;
##Custom Scripting for Hospital verification and payment on account numbers only.
BEGIN { $SIG{'__DIE__'} = sub { print <<__WARN__ and exit 1 } }
Content-Type: text/html; charset=ISO-8859-1\n
Fatal Error in @{[(caller(2))[1]||__FILE__]} at ${\ scalar localtime }
while responding to request from ${\ $ENV{'REMOTE_ADDR'} || 'localhost
+' }
${\ join("\n",$!,$@,@_) }
__WARN__

use strict;
require 5.003;
#require 'test03.cgi';

use accutil;
use Time::Local;
use File::stat;
use Time::localtime;


#
print "Content-type: text/html\n\n";
my ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime;
$year += 1900;
$mon += 1;
my $datetime = sprintf "%04d%02d%02d%02d%02d%02d", $year, $mon, $mday, $hour, $min, $sec;
my $version = '09.2012';
my $package = "Pro";
my $file='data007/WEB.TXT';  #this is the name of the datafile uploaded
my $date_string = ctime(stat($file)->mtime);
my $cfgfile = accutil::cfgfile();
my $accautoprefix = "CUS1";
my $plsseltag = "--- Please Select ---";
my $basedir;
my $singleuser;
my $adminemail;
my $mailer;
my $debug = 0;
my $LOCK_EX;
my ($payname, $payemail);
my $cmpladdr;
my $reqemail;
my ($mbrdir, $mbrurl);
my $hostaddr;
my $cgidir;
my %VARS;
my $original_file;
my $new_file;
my $starttime = time();
my $headeron = 0;
my $accid;
my $acc1bal;
my $accnum_02;
my $acc2bal;
my $accnum_03;
my $acc3bal;
my $siddir;
my ($cmd, @pairs, $pair);
my %INPUT;
my $cgiurl = $ENV{'SCRIPT_NAME'};
my $ip_address_file = $ENV{'REMOTE_ADDR'};
my $sid;
my $sid2;
my $sid3;
my $buffer;
my (@statusline, @cmdline, @bodylines);

@pairs = split(/&/, $ENV{'QUERY_STRING'});
foreach $pair (@pairs) {
        my ($name, $value);
        ($name, $value) = split(/=/, $pair);
        $value =~ s/%0D%0A/ /g;
        $value =~ s/%0A%0D/ /g;
        $value =~ tr/+/ /;
        $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
        if ($INPUT{$name}) { $INPUT{$name} = $INPUT{$name}."::::".$value; }
        else { $INPUT{$name} = $value; }
}

read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});
@pairs = split(/&/, $buffer);
foreach $pair (@pairs) {
        my ($name, $value);
        ($name, $value) = split(/=/, $pair);
        $value =~ s/%0D%0A/ /g;
        $value =~ s/%0A%0D/ /g;
        $value =~ tr/+/ /;
        $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
        if ($INPUT{$name}) { $INPUT{$name} = $INPUT{$name}.":".$value; }
        else { $INPUT{$name} = $value; }
}
$cmd = $INPUT{'cmd'};
$accid = $INPUT{'accid'};
$acc1bal = $INPUT{'acc1bal'};
$accnum_02 = $INPUT{'accnum_02'};
$acc2bal = $INPUT{'acc2bal'};
$accnum_03 = $INPUT{'accnum_03'};
$acc3bal = $INPUT{'acc3bal'};

findcgidir();
if (!loadcfg()) { errexit("Failed to read config file"); }
if ($singleuser eq 'on') {
  loginform("Database shot down for maintenance, please try login later");
  exit;
}
if ($cmd eq 'lostpasswd') { lostpasswd(); exit; }
if ($cmd eq 'register') { formaccntopen(); exit; }
if ($cmd eq 'formaccntopen') { formaccntopen(); exit; }
if ($cmd eq 'formlostpasswd') { formlostpasswd(); exit; }
if ($cmd eq 'accntopen') { accntopen(); exit; }
$sid = $INPUT{'sid'};
$sid2 = $INPUT{'sid2'};
if ($cmd eq 'payform') {

 payform(); exit;
 }
#if ($cmd eq 'delivery_form') { payform(); exit; }
#if ($cmd eq 'service_call_request') { payform(); exit; }
if ($cmd eq 'activate') { activate(); exit; }
if ($cmd eq 'login') { login(); }
if ($sid eq undef) { loginform(); exit; }
if ($sid2 eq undef) { loginform(); exit; }
if (!checksid()) { loginform(); exit; }
if ($cmd eq 'gomain') { formmain(); exit; }
if ($cmd eq 'gomain2') { formmain2(); exit; }
if ($cmd eq 'accedit') { accedit(); exit; }
if ($INPUT{'cmdmain.x'} ne undef) { formmain(); exit; }
if ($INPUT{'cmdlogoff.x'} ne undef) { logoff(); exit; }
if ($INPUT{'cmdview.x'} ne undef) { formviewaccnt(); exit; }
if ($INPUT{'cmdedit.x'} ne undef) { formeditaccnt(); exit; }
if ($INPUT{'cmdactivate.x'} ne undef) { formactivate(); exit; }

&header;
print "unknown command";
&footer;
exit;

########################################sub pay form###########################
sub payform {
########This is actually part of the verification screen hidden fields
print<<EOF;

EOF

my $payform = "$basedir/tmpl/payform.html";
my $delivery_form = "$basedir/tmpl/delivery_form.html";
my $service_call_request = "$basedir/tmpl/service_call_request.html";

cmlprint("<input type=HIDDEN name='accid' value=\"$accid\">");
cmlprint("<input type=HIDDEN name='acc1bal' value=\"$acc1bal\">");
cmlprint("<input type=HIDDEN name='accnum_02' value=\"$accnum_02\">");
cmlprint("<input type=HIDDEN name='acc2bal' value=\"$acc2bal\">");
cmlprint("<input type=HIDDEN name='accnum_03' value=\"$accnum_03\">");
cmlprint("<input type=HIDDEN name='acc3bal' value=\"$acc3bal\">");

if ($debug) {
  
  my $tm = time() - $starttime;
  my ($utm, $stm) = (times())[0, 1];
  print "Run time = $tm, user = $utm, system = $stm</br>";
  foreach my $key (sort keys (%INPUT)) {
    print "$key: $INPUT{$key}<br>\n";
  }
  print "<p>VARS:</br>\n";
  foreach my $key (sort keys (%VARS)) {
    print "$key: $VARS{$key}<br>\n";
  }
  accutil::debug();
  print "</td></tr>";
}

my %r = accutil::getaccnt($accid);
my %ra = accutil::getaccnt($acc1bal);
my %r1 = accutil::getaccnt($accnum_02);
my %r1a = accutil::getaccnt($acc2bal);
my %r2 = accutil::getaccnt($accnum_03);
my %r2a = accutil::getaccnt($acc3bal);

if ($cmd eq "payform") {
 if (-e $payform) {
		#4282014 jts;
		#lookup the accounts fresh.
		 my $acctdbfile=accutil::getaccdbname();
		 my %accounts=accutil::getAccounts($acctdbfile);
		#get the balance for one.
		$acc1bal=accutil::getAccountBalance($accid,\%accounts);
		$acc2bal=accutil::getAccountBalance($accnum_02,\%accounts);
		$acc3bal=accutil::getAccountBalance($accnum_03,\%accounts);

        open(TEMPL, "$payform");
		

        my $template = "";

	        while(<TEMPL>) {

	        $template .= $_;

		$template =~ s/\$accid/$accid/gm;
		$template =~ s/\$accnum_02/$accnum_02/gm; ## Makes id dissapear
		$template =~ s/\$accnum_03/$accnum_03/gm; ## Makes id dissapear


		#4282014 jtsreplace balances
		$template =~ s/\$acc1bal/$acc1bal/gm;
		$template =~ s/\$acc2bal/$acc2bal/gm; ## Makes id dissapear
		$template =~ s/\$acc3bal/$acc3bal/gm; ## Makes id dissapear

	        }

	close(TEMPL);

        for my $ikey (keys(%r)) {

	 
		my ($value) = $r{$ikey};		
	       $template =~ s/\$$ikey/$value/gm;
		  
	}
 

	print "$template\n";
	
 }
}

if ($cmd eq "delivery_form") {
  if (-e $delivery_form) {

        open(TEMPL, "$delivery_form");
        my $template = "";

	        while(<TEMPL>) {

	        $template .= $_;

		$template =~ s/\$accid/$accid/gm;
		$template =~ s/\$acc1bal/acc1bal/gm;
		$template =~ s/\$accnum_02/$accnum_02/gm;
		$template =~ s/\$$acc2bal/$acc2bal/gm;
		$template =~ s/\$accnum_03/$accnum_03/gm;
		$template =~ s/\$$acc3bal/$acc3bal/gm;
	        }

	close(TEMPL);

        for my $ikey (keys(%r)) {

	 my ($value) = $r{$ikey};
					
	       $template =~ s/\$$ikey/$value/gm;
	}

	print "$template\n";

	&footertwo;
  }
}

if ($cmd eq "service_call_request") {
  if (-e $service_call_request) {

        open(TEMPL, "$service_call_request");
        my $template = "";

	        while(<TEMPL>) {

	        $template .= $_;

		$template =~ s/\$accid/$accid/gm;
	        }

	close(TEMPL);

        for my $ikey (keys(%r)) {

	 my ($value) = $r{$ikey};
					
	       $template =~ s/\$$ikey/$value/gm;
	}

	print "$template\n";
		
 }
}else {

   print "<center><font size=-3>Custom script &copy; Coreave Design & Hosting</center></font>";
  print "</font></td></tr></table></td></tr></table></td></tr></table></BODY></HTML>\n";
  
}
}

#============================================================================ formmain

sub formmain {

  my $msg = $_[0];
  
  if ($msg ne undef) { $msg = "<font color=red><b>$msg</b></font><br><br>"; }
  &header;

  my %r = accutil::getaccnt($accid);
  my %ra = accutil::getaccnt($acc1bal);
  my %r_1 = accutil::getaccnt($accnum_02);
  my %r_2 = accutil::getaccnt($acc2bal);
  my %r_3 = accutil::getaccnt($accnum_03);
  my %r_4 = accutil::getaccnt($acc3bal);
    
  if (!%r_2) {
    errorpage(accutil::error());
    &footer;}
	
	if (!%r_1) {
    errorpage(accutil::error());
    &footer;
	
  }
##############This is the Account verification Verified Screen#####################

    stlprint("\n<input type=HIDDEN name='accid' value='$accid'>\n");
	stlprint("\n<input type=HIDDEN name=\"accid_bal\" value=\"$acc1bal\">\n");
	 stlprint("\n<input type=HIDDEN name=\"accnum_02\" value=\"$accnum_02\">\n");
	stlprint("\n<input type=HIDDEN name=\"acc2bal\" value=\"$acc2bal\">\n");
	 stlprint("\n<input type=HIDDEN name=\"accnum_03\" value=\"$accnum_03\">\n");
	stlprint("\n<input type=HIDDEN name=\"acc3bal\" value=\"$acc3bal\">\n");
	
	 stlprint("<div align=\"center\"><font face=\"Verdana\" size=\"2\" color=\"#000000\"><b>Account Number(s):</b></font></div>\n\n");
	  stlprint("<table width=\"175\" border=\"0\" cellspacing=\"0\" cellpadding=\"3\" align=\"center\"><tr><td width=\"25\"><font face=\"Verdana\" size=\"2\" color=\"#000000\">1.</font></td>\n");
     stlprint("<td width=\"150\"><font face=\"Verdana\" size=\"2\" color=\"#000000\">$accid</font></td></tr><tr><td width=\"25\"><font face=\"Verdana\" size=\"2\" color=\"#000000\">2.</font></td>\n");
    stlprint("<td width=\"150\"><font face=\"Verdana\" size=\"2\" color=\"#000000\">$accnum_02</font></td></tr><tr>\n");
    stlprint("<td width=\"25\"><font face=\"Verdana\" size=\"2\" color=\"#000000\">3.</font></td><td width=\"265\"><font face=\"Verdana\" size=\"2\" color=\"#000000\">$accnum_03</font></td>\n\n");
  stlprint("</tr></table><p align=\"center\"><font face=\"Verdana\" size=\"3\" color=\"#000000\"><b><font color=\"#0080FF\">Verified</font><font color=\"#00FF00\"> OK</font></b></font></p>\n\n");

  cmlprint("<table align=\"center\"border=\"0\" width=\"100%\" cellspacing=\"0\" cellpadding=\"0\"><tr>");
  cmlprint("<form method=\"POST\" action=\"$cgiurl\"><td width=\"710\" valign=\"top\">");
 
  cmlprint("<input type=\"hidden\" name=\"sid\" value=\"$sid\">\n");
  cmlprint("<input type=\"hidden\" name=\"sid2\" value=\"$sid2\">\n");
cmlprint("<input type=\"hidden\" name=\"sid3\" value=\"$sid3\">\n");
  cmlprint("<input type=\"hidden\" name=\"accid\" value=\"$accid\">\n");
  cmlprint("<input type=\"hidden\" name=\"acc1bal\" value=\"$acc1bal\">\n");
  cmlprint("<input type=\"hidden\" name=\"accnum_02\" value=\"$accnum_02\">\n");
 cmlprint("<input type=\"hidden\" name=\"acc2bal\" value=\"$acc2bal\">\n");
   cmlprint("<input type=\"hidden\" name=\"accnum_03\" value=\"$accnum_03\">\n");
    cmlprint("<input type=\"hidden\" name=\"acc3bal\" value=\"$acc3bal\">\n");
   
  if (!accutil::verifiednew(%r)) {
    my $type = 'Verify Email Address';
    $type = 'Activate an Account' if $VARS{'manual'} eq undef && !accutil::enabled(%r);
    cmlprint("<input type=\"image\" name=\"cmdactivate\" src=\"$VARS{'imgdirurl'}/cmdactv.gif\" border=\"0\" width=\"50\" height=\"20\" alt=\"$type\">\n");
  }
    cmlprint("</tr></table>\n\n");
  bodyprint("</form>\n");
  
  bodyprint("<br><br><center>$msg");
  
  if (accutil::enabled(%r)) {
  
  } elsif ($r{'banby'} ne undef) {
    bodyprint("<b>Your account disabled");
    if ($r{'banreason'} ne undef) {
      bodyprint("<br>Reason: $r{'banreason'}</b><br><br>\n");
    }
    bodyprint("<br><br>Please contact <a href=\"mailto:$VARS{'payemail'}\">$VARS{'payname'}</a> for more info.<br><br>\n");
  } else {
 
 bodyprint("");
    if ($VARS{'reqemail'} ne undef && !accutil::verifiednew(%r)) {
      
   bodyprint("\n");
    } elsif ($VARS{'manual'} ne undef) {
    
	   bodyprint("");
    }
  
	bodyprint("\n");
  }
 
  &footer;
}

#============================================================================ logoff

sub logoff {
  if ($accid ne undef) {
    my $f = "$siddir/$accid";
    if (-e $f) { unlink($f); }
  }
  loginform();
}


#============================================================================ login
sub retry_before_fail {

  my ( $maxtries , $coderef , @args ) = @_ ;
  while( $maxtries ) {
  
    if( my $result = $coderef->( @args ) ) {
      return $result ;
    }
    $maxtries-- ;
	 
  }
  # Failure now either return or die
  return ;
}

sub login {

  if ($accid eq undef) { loginform("Missing Account Number"); exit; }
  
 if ($accnum_02 eq undef)
{
$accnum_02 = "none"; # if no second account number entered prints none.

}
 
 if ($accnum_03 eq undef)
{
$accnum_03 = "none"; # if no third account number entered prints none.
}
 
  my %r = accutil::getaccnt($accid);
  my %ra = accutil::getaccnt($acc1bal);
  my %r1 = accutil::getaccnt($accnum_02);
  my %r1a = accutil::getaccnt($acc2bal);
  my %r2 = accutil::getaccnt($accnum_03);
  my %r2a = accutil::getaccnt($acc3bal);
  
  if (!%r || ($r{'passwd'} ne $INPUT{':'})) 
  {
  use warnings;

    my( $arg );
    my( $count );

    $count = 0;
    foreach $arg ( @ARGV )
    {
        $count++;
        print( STDOUT "Argument $count is '$arg'.\n" );
		
    }
    loginform("Sorry, we couldn't locate that account.<br> You have a Maximum of 4 trys<br><font color=black></font>You have used One of them.</font>");
	############################################ max_attempts ############################
	if (-e "$siddir/log/$ip_address_file") {
    print "Two trys left!\n";
	
	
	if (-e "$siddir/log/$ip_address_file.02") {
    print "<br>This is your Last Try<br>YOU WILL BE LOCKED OUT OF OUR SYSTEM.<br>Contact our Customer Service at 928-757-0627 \n";
	
		
	if (-e "$siddir/log/$ip_address_file.03") {
    print "<br><font color=red>LOCKED OUT OF OUR SYSTEM.</font><br>Contact our Customer Service at (888) 898-9090\n";
		
	&max_attempts;
	
	}
		
	# Creates file for third account number attempt
	 my $g = "$siddir/log/$ip_address_file.03";
     if (!open(SIDF, ">$g")) { errexit("Unable create customer session"); }
  flock(SIDF, $LOCK_EX) if $LOCK_EX;
  print SIDF "\n$accid\n";
  
  close(SIDF);
	
}	
	# Creates file for second account number attempt
	 my $g = "$siddir/log/$ip_address_file.02";
     if (!open(SIDF, ">$g")) { errexit("Unable create customer session"); }
  flock(SIDF, $LOCK_EX) if $LOCK_EX;
  print SIDF "\n$accid\n";
  
  close(SIDF);
	
}
	
	#Creates file for first account number attempt
 
  my $g = "$siddir/log/$ip_address_file";
   
  if (!open(SIDF, ">$g")) { errexit("Unable create customer session"); }
  flock(SIDF, $LOCK_EX) if $LOCK_EX;
  print SIDF "\n$accid\n";
  
  close(SIDF);
	


     exit;
  }
  srand(time());
    $sid = int(rand(1000000));
  #Creates a coded sid for validation of first account number valitations against what is successfully entered.
  my $f = "$siddir/$accid";
  if (!open(SIDF, ">$f")) { errexit("Unable create customer session"); }
  flock(SIDF, $LOCK_EX) if $LOCK_EX;
  print SIDF "$sid\n";
  close(SIDF);
   
   $sid2 = int(rand(100000));
  #Creates a coded sid for validation of second account number valitations against what is successfully entered.
  my $f2 = "$siddir/$accnum_02";
  if (!open(SIDF, ">$f2")) { errexit("Unable create customer session"); }
  flock(SIDF, $LOCK_EX) if $LOCK_EX;
  print SIDF "$sid2\n";
  close(SIDF);
     
   #Creates a file in data007.sid/log 0000000 account id (accid) with ip address of client. then unlinks them
  
 unlink("$siddir/log/$ip_address_file");
unlink("$siddir/log/$ip_address_file.02");
unlink("$siddir/log/$ip_address_file.03");
  $cmd='gomain';
  
}
#============================================================================ checksid

sub checksid {
  my $f = "$siddir/$accid";
  
  if (! -e $f) { return 0; }
  if (!open(SIDF, $f)) { return 0; }
  flock(SIDF, $LOCK_EX) if $LOCK_EX;
  my $s = <SIDF>;
  close(SIDF);
  chop($s);
  if ($s eq $sid) { return 1; }
  return 0;
  
   my $f2 = "$siddir/$accnum_02";    ## SECOND SID2
  if (! -e $f2) { return 0; }
  if (!open(SIDF, $f2)) { return 0; }
  flock(SIDF, $LOCK_EX) if $LOCK_EX;
  my $s2 = <SIDF>;
  close(SIDF);
  chop($s2);
  if ($s2 eq $sid2) { return 1; }
  return 0;
  
  my $f3 = "$siddir/$accnum_03";    ## SECOND SID3
  if (! -e $f3) { return 0; }
  if (!open(SIDF, $f3)) { return 0; }
  flock(SIDF, $LOCK_EX) if $LOCK_EX;
  my $s3 = <SIDF>;
  close(SIDF);
  chop($s3);
  if ($s3 eq $sid3) { return 1; }
  return 0;
}


#============================================================================ header

sub header {

if ($headeron) { return; }

print<<EOF;
<HTML>\n


EOF
$headeron=1;
my $header_file = "$basedir/tmpl/header.html";
if (-e $header_file) {
        if (open(HDR, "<$header_file")) {
                my @lines = <HDR>;
                close(HDR);
                print "<tr><td>\n";
                print @lines;
                return;
                print "</td></tr>\n";
        }
}
}
#============================================================================ footer

sub footer {
my $footer_file = "$basedir/tmpl/footer.txt";
#$accid = formaccntopen&template=payform.html&$accid;
if ($debug) {
  print "<tr><td>";
  my $tm = time() - $starttime;
  my ($utm, $stm) = (times())[0, 1];
  print "Run time = $tm, user = $utm, system = $stm</br>";
  foreach my $key (sort keys (%INPUT)) {
    print "$key: $INPUT{$key}<br>\n";
  }
  print "<p>VARS:</br>\n";
  foreach my $key (sort keys (%VARS)) {
    print "$key: $VARS{$key}<br>\n";
  }
  accutil::debug();
  print "</td></tr>";
}
if (-e $footer_file) {
        

        open(TEMPL, "$footer_file");
        my $template = "";
		while(<TEMPL>) {

	        $template .= $_;

		$template =~ s/\$accid/$accid/gm;          ## These are what is allowed in the footer post to make it to the payform
		$template =~ s/\$acc1bal/$acc1bal/gm;      ## These are what is allowed in the footer post to make it to the payform
		$template =~ s/\$accnum_02/$accnum_02/gm;  ## These are what is allowed in the footer post to make it to the payform
		$template =~ s/\$acc2bal/acc2bal/gm;       ## These are what is allowed in the footer post to make it to the payform
		$template =~ s/\$accnum_03/$accnum_03/gm;  ## These are what is allowed in the footer post to make it to the payform
		$template =~ s/\$acc3bal/acc3bal/gm;       ## These are what is allowed in the footer post to make it to the payform
	        }
        close(TEMPL);

	print "$template\n";

	return;



} else {

  print "<tr><td><br><table align=\"center\"width=\"100%\" border=0><tr><td><hr></td></tr><tr><td>";
  print "<center><font size=-3> &copy;$payname</font></center><br>";
  #print "Support: <A HREF=\"mailto:$adminemail\">$adminemail</A><br>";
  print "Custom script &copy; Coreave Design & Hosting";
  print "</font></td></tr></table></td></tr></table></td></tr></table></BODY></HTML>\n";
}



}
#============================================================================


sub bodyprint {
  my $line = $_[0];
  $line =~ s/\<td/<td bgcolor=\"$VARS{'bodycolor'}\" valign=\"top\"/g;
  if (!@bodylines) {
    push @bodylines, "<tr><td bgcolor=\"$VARS{'bodycolor'}\">";
  }
  push @bodylines, $line;
  if ($line =~ /\n\n/) {
    while (@bodylines) { print shift @bodylines; }
    print "</td></tr>";
  }
}
#============================================================================ cmlprint

sub cmlprint {
  my $line = $_[0];
  $line =~ s/\<td/<td bgcolor=\"White\"/g;
   if (!@cmdline) {
    push @cmdline, "<tr><td bgcolor=\"$VARS{'cmdcolor'}\">";
  }
  push @cmdline, $line;
  if ($line =~ /\n\n/) {
    while (@cmdline) { print shift @cmdline; }
    print "</td></tr>";
  }
}
#============================================================================ stlprint

sub stlprint {
  my $line = $_[0];
  $line =~ s/\<td/<td bgcolor=\"$VARS{'stlcolor'}\"/g;
  if (!@statusline) {
    push @statusline, "<tr><td bgcolor=\"$VARS{'stlcolor'}\">";
  }
  push @statusline, $line;
  if ($line =~ /\n\n/) {
    while (@statusline) { print shift @statusline; }
    print "</td></tr>";
  }
}
#============================================================================ errexit

sub errexit {
print <<EOT;
<html><head></head><body>
<center><br><font size=+1 color=red><b>
Fatal Error: $_[0]. Execution aborted...
</b></font></center>
</body></html>
EOT
exit;
}
#============================================================================Max attempts reached
sub max_attempts

 {
 
print <<EOT;
<html><head>
<meta http-equiv='refresh' content='0; url=/maxlimit.html'>
</head><body>
<center><br><font size=+1 color=red><b>
You have Exceeded the number of Account attempts $_[0]. This you have been locked.
</b></font></center>
</body></html>

EOT
&sleepy_timer;
exit;

}
#=======================================================File deletion timer
sub sleepy_timer
{
sleep (30); # 	LENGTH OF SECONDS TO LOCK OUT IP ADDRESS FROM SEARCHING FOR ACCOUNTS..
unlink("$siddir/log/$ip_address_file");
unlink("$siddir/log/$ip_address_file.02");
unlink("$siddir/log/$ip_address_file.03");
#exit;
}

##################GET ACCOUNT BALANCES########################
$file='/var/www/vhosts/esofva.com/cgi-bin/best2/data007/WEB.TXT';



#============================================================================ findcgidir

sub findcgidir {
  my $scriptfilename = $ENV{'SCRIPT_FILENAME'};
  $scriptfilename = $ENV{'PATH_TRANSLATED'} if $ENV{'PATH_TRANSLATED'} ne undef;
  if ($scriptfilename eq undef) {
    if ($ENV{'PWD'} ne undef) {
      my @parts = split(/\//, $ENV{'SCRIPT_NAME'});
      my $f = pop @parts;
      $scriptfilename = "$ENV{'PWD'}/$f";
    }
  }
  my @cgipath = split(/\//, $scriptfilename);
  pop(@cgipath);
  $cgidir = join("\/", @cgipath);
}
#============================================================================ loadcgf

sub loadcfg {
  my @buff;
  my $line;
  if (! open(CFG, $cfgfile)) { return 0; }
  @buff = <CFG>;
  close(CFG);
  chomp(@buff);
  foreach $line (@buff) {
    my $name;
    my $value;
    ($name, $value) = split(/=/, $line);
    if ($value ne undef) { $VARS{$name} = $value; }
  }
  
  $basedir = $VARS{'basedir'};
  $siddir = $VARS{'siddir'};
  $adminemail = $VARS{'adminemail'};
  $mailer = $VARS{'mailer'};
  my $uselock = $VARS{'uselock'};
  $payname = $VARS{'payname'};
  $singleuser = $VARS{'singleuser'};
  $payemail = $VARS{'payemail'};
  $cmpladdr = $VARS{'cmpladdr'};
  $reqemail = $VARS{'reqemail'};
  $mbrdir = $VARS{'mbrdir'};
  $mbrurl = $VARS{'mbrurl'};
  $hostaddr = $VARS{'hostaddr'};
  $VARS{'bodycolor'} = '#ffffff' if $VARS{'bodycolor'} eq undef;
  $VARS{'cmdcolor'} = '#ffffff' if $VARS{'cmdcolor'} eq undef;
  $VARS{'stlcolor'} = '#ffffff' if $VARS{'stlcolor'} eq undef;
  &accutil::init(%VARS);
  if ($uselock) { $LOCK_EX = "2"; }
  return 1;
}
########################################sub pay form###########################

#============================================================================ loginform

sub loginform {
  my $msg = $_[0];
  
  if ($msg ne undef) { $msg = "<font color=red><b>$msg</b></color><br><br>"; }
  
  #&header;
###stlprint("<center><img src=/logos/head01.png></center>\n\n");

stlprint("<input type=\"hidden\" name=\"account_id\" value=\"$accid\"> \n");
stlprint("<input type=\"hidden\" name=\"acc1bal\" value=\"$acc1bal\"> \n");
stlprint("<input type=\"hidden\" name=\"accnum_02\" value=\"$accnum_02\"> \n");
stlprint("<input type=\"hidden\" name=\"acc2bal\" value=\"$acc2bal\"> \n");
stlprint("<input type=\"hidden\" name=\"accnum_03\" value=\"$accnum_03\"> \n");
stlprint("<input type=\"hidden\" name=\"acc3bal\" value=\"$acc3bal\"> \n");
stlprint("<input type=\"hidden\" name=\"ip_address\" value=\"$ENV{'REMOTE_ADDR'}\"> \n");
  stlprint("<center><b><font size=\"4\" color=\"#000000\">Account Number Verifications </font></b></center>\n\n");
stlprint("<center><font size=\"2\" color=\"#000000\">In order to make online payments, we must verify account number(s).<br>Leave Unused fields Blank. Please follow the instructions.<br><font size=3>Testing Numbers: 9068347 - 30548796 - 0007000000006792</font> </font></center>\n\n");
  bodyprint("<center><br>$msg</font><form method=\"POST\" action=\"$cgiurl\">");
  my $idtitle = 'Enter Account Number ';
  $idtitle = 'Email Address' if $VARS{'emailid'} ne undef;
  bodyprint("<table width=\"400\" border=\"0\" cellspacing=\"3\" cellpadding=\"0\" align=\"center\"><tr><td width=\"171\">");
  bodyprint(" <div align=\"left\"><font face=\"Verdana\" size=\"2\" color=\"#000000\">Enter Account Number:</font></div></td><td width=\"183\"><div align=\"left\">&nbsp;"); 
  bodyprint("<input type=\"hidden\" size=\"25\" name=\"passwd\" value=\"password\"><input type=\"hidden\" name=\"cmd\" value=\"login\"><input type=\"text\" size=\"25\" name=\"accid\" value=\"$INPUT{'accid'}\">");
  bodyprint("</div></td></tr><tr><td width=\"171\"><div align=\"left\"><font face=\"Verdana\" size=\"2\" color=\"#000000\">Account Number Two:</font></div></td><td width=\"183\">");
   bodyprint("<div align=\"left\">&nbsp;<input type=\"text\" size=\"25\" name=\"accnum_02\" value=\"$INPUT{'accnum_02'}\"></div></td></tr><tr><td width=\"171\">"); 
   bodyprint("<div align=\"left\"><font face=\"Verdana\" size=\"2\" color=\"#000000\">Account Number Three:</font></div></td><td width=\"183\"><div align=\"left\">&nbsp;<input type=\"text\" size=\"25\" name=\"accnum_03\" value=\"$INPUT{'accnum_03'}\">");
     bodyprint("</div></td></tr></table>");
  bodyprint("<br><input type=\"submit\" value=\"Verify Account Number\"></form><br></html>");
   
  if ($VARS{'nonewlink'} eq undef) {
    bodyprint("<a href=\"$cgiurl?cmd=formaccntopen\">Register Now!</a><br>\n");
  }
bodyprint("</td></tr></table>\n\n");
  
}
#============================================================================ errorpage

sub errorpage {
  my $e = $_[0];
  cmlprint("<form method=\"POST\" action=\"$cgiurl\">\n");
  cmlprint("<input type=\"hidden\" name=\"sid\" value=\"$sid\">");
  cmlprint("<input type=\"hidden\" name=\"accid\" value=\"$accid\">");
  cmlprint("<input type=\"image\" name=\"cmdmain\" src=\"$VARS{'imgdirurl'}/cmdcancel.gif\" border=\"0\" width=\"50\" height=\"20\" alt=\"Back to accounts list\">");
  stlprint("<table align=\"center\"border=\"0\" width=\"100%\" cellspacing=\"0\" cellpadding=\"0\"><tr><td>");
  bodyprint("</form><br><br><center><b>Error: $e</b><br>Go <FORM><INPUT Type=button VALUE=Back onClick=history.go(-1);return true;></FORM> and correct the Account Number</a></center><br>\n\n");
  bodyprint("Go Back and correct the Account Number\n");
  exit;
}