substitute.cgi

 


#!/usr/bin/perl

@pairs = split(/&/, $ENV{'QUERY_STRING'});

foreach $pair (@pairs)
{
    ($key, $value) = split (/=/, $pair);
    $key =~ tr/+/ /;
    $key =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
    $value =~ tr/+/ /;
    $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
    $value =~s/<!--(.|\n)*-->//g;

    if ($formdata{$key})
    {
        $formdata{$key} .= ", $value";
    }
    else
    {
        $formdata{$key} = $value;
    }
}



print "Content-type: text/html\n\n";

$comments = $formdata{'comments'};

if ($comments =~ /<IMG[^>]*>/) {
	print "<P>Sorry, images are not permitted. Please limit your comments to text.";
	$comments =~ s/<IMG[^>]*>//g;
}
print "<P>Your text comments were <P><B>$comments" if $comments;