#!/usr/bin/perl -Tw # # $Id: signup.cgi,v 1.29 2002-05-30 22:45:20 ivan Exp $ use strict; use vars qw( @payby $cgi $locales $packages $pops $init_data $error $last $first $ss $company $address1 $address2 $city $state $county $country $zip $daytime $night $fax $invoicing_list $payby $payinfo $paydate $payname $referral_custnum $pkgpart $username $password $password2 $sec_phrase $popnum $agentnum $ieak_file $ieak_template $cck_file $cck_template $signup_html $signup_template $success_html $success_template $decline_html $decline_template $ac $exch $loc $email_name $pkg $self_url ); use subs qw( print_form print_okay print_decline signup_default success_default decline_default expselect ); use CGI; #use CGI::Carp qw(fatalsToBrowser); use Text::Template; use Business::CreditCard; use HTTP::Headers::UserAgent 2.00; use FS::SignupClient 0.03 qw( signup_info new_customer ); #acceptable payment methods # #@payby = qw( CARD BILL COMP ); #@payby = qw( CARD BILL ); #@payby = qw( CARD ); @payby = qw( CARD PREPAY ); $ieak_file = '/usr/local/freeside/ieak.template'; $cck_file = '/usr/local/freeside/cck.template'; $signup_html = -e 'signup.html' ? 'signup.html' : '/usr/local/freeside/signup.html'; $success_html = -e 'success.html' ? 'success.html' : '/usr/local/freeside/success.html'; $decline_html = -e 'decline.html' ? 'decline.html' : '/usr/local/freeside/decline.html'; if ( -e $ieak_file ) { my $ieak_txt = Text::Template::_load_text($ieak_file) or die $Text::Template::ERROR; $ieak_txt =~ /^(.*)$/s; #untaint the template source - it's trusted $ieak_txt = $1; $ieak_txt =~ s/\r//g; # don't double \r on old templates $ieak_txt =~ s/\n/\r\n/g; $ieak_template = new Text::Template ( TYPE => 'STRING', SOURCE => $ieak_txt ) or die $Text::Template::ERROR; } else { $ieak_template = ''; } if ( -e $cck_file ) { my $cck_txt = Text::Template::_load_text($cck_file) or die $Text::Template::ERROR; $cck_txt =~ /^(.*)$/s; #untaint the template source - it's trusted $cck_txt = $1; $cck_template = new Text::Template ( TYPE => 'STRING', SOURCE => $cck_txt ) or die $Text::Template::ERROR; } else { $cck_template = ''; } $agentnum = ''; if ( -e $signup_html ) { my $signup_txt = Text::Template::_load_text($signup_html) or die $Text::Template::ERROR; $signup_txt =~ /^(.*)$/s; #untaint the template source - it's trusted $signup_txt = $1; $signup_template = new Text::Template ( TYPE => 'STRING', SOURCE => $signup_txt, DELIMITERS => [ '<%=', '%>' ] ) or die $Text::Template::ERROR; if ( $signup_txt =~ /<\s*INPUT TYPE="?hidden"?\s+NAME="?agentnum"?\s+VALUE="?(\d+)"?\s*>/si ) { $agentnum = $1; } } else { $signup_template = new Text::Template ( TYPE => 'STRING', SOURCE => &signup_default, DELIMITERS => [ '<%=', '%>' ] ) or die $Text::Template::ERROR; } if ( -e $success_html ) { my $success_txt = Text::Template::_load_text($success_html) or die $Text::Template::ERROR; $success_txt =~ /^(.*)$/s; #untaint the template source - it's trusted $success_txt = $1; $success_template = new Text::Template ( TYPE => 'STRING', SOURCE => $success_txt, DELIMITERS => [ '<%=', '%>' ], ) or die $Text::Template::ERROR; } else { $success_template = new Text::Template ( TYPE => 'STRING', SOURCE => &success_default, DELIMITERS => [ '<%=', '%>' ], ) or die $Text::Template::ERROR; } if ( -e $decline_html ) { my $decline_txt = Text::Template::_load_text($decline_html) or die $Text::Template::ERROR; $decline_txt =~ /^(.*)$/s; #untaint the template source - it's trusted $decline_txt = $1; $decline_template = new Text::Template ( TYPE => 'STRING', SOURCE => $decline_txt, DELIMITERS => [ '<%=', '%>' ], ) or die $Text::Template::ERROR; } else { $decline_template = new Text::Template ( TYPE => 'STRING', SOURCE => &decline_default, DELIMITERS => [ '<%=', '%>' ], ) or die $Text::Template::ERROR; } ( $locales, $packages, $pops, $init_data ) = signup_info(); @payby = @{$init_data->{'payby'}} if @{$init_data->{'payby'}}; $packages = $init_data->{agentnum2part_pkg}{$agentnum} if $agentnum; $cgi = new CGI; if ( defined $cgi->param('magic') ) { if ( $cgi->param('magic') eq 'process' ) { $cgi->param('state') =~ /^(\w*)( \(([\w ]+)\))? ?\/ ?(\w+)$/ or die "Oops, illegal \"state\" param: ". $cgi->param('state'); $state = $1; $county = $3 || ''; $country = $4; $payby = $cgi->param('payby'); $payinfo = $cgi->param( $payby. '_payinfo' ); $paydate = $cgi->param( $payby. '_month' ). '-'. $cgi->param( $payby. '_year' ); $payname = $cgi->param( $payby. '_payname' ); if ( $invoicing_list = $cgi->param('invoicing_list') ) { $invoicing_list .= ', POST' if $cgi->param('invoicing_list_POST'); } else { $invoicing_list = 'POST'; } $error = ''; $last = $cgi->param('last'); $first = $cgi->param('first'); $ss = $cgi->param('ss'); $company = $cgi->param('company'); $address1 = $cgi->param('address1'); $address2 = $cgi->param('address2'); $city = $cgi->param('city'); #$county, #$state, $zip = $cgi->param('zip'); #$country, $daytime = $cgi->param('daytime'); $night = $cgi->param('night'); $fax = $cgi->param('fax'); #$payby, #$payinfo, #$paydate, #$payname, #$invoicing_list, $referral_custnum = $cgi->param('ref'); $pkgpart = $cgi->param('pkgpart'); $username = $cgi->param('username'); $sec_phrase = $cgi->param('sec_phrase'); $password = $cgi->param('_password'); $popnum = $cgi->param('popnum'); #$agentnum, # = $cgi->param('agentnum'), if ( $cgi->param('_password') ne $cgi->param('_password2') ) { $error = $init_data->{msgcat}{passwords_dont_match}; #msgcat $password = ''; $password2 = ''; } else { $password2 = $cgi->param('_password2'); if ( $payby eq 'CARD' && $cgi->param('CARD_type') ) { $payinfo =~ s/\D//g; $payinfo =~ /^(\d{13,16})$/ or $error ||= $init_data->{msgcat}{invalid_card}; #. $self->payinfo; $payinfo = $1; validate($payinfo) or $error ||= $init_data->{msgcat}{invalid_card}; #. $self->payinfo; cardtype($payinfo) eq $cgi->param('CARD_type') or $error ||= $init_data->{msgcat}{not_a}. $cgi->param('CARD_type'); } $error ||= new_customer ( { 'last' => $last, 'first' => $first, 'ss' => $ss, 'company' => $company, 'address1' => $address1, 'address2' => $address2, 'city' => $city, 'county' => $county, 'state' => $state, 'zip' => $zip, 'country' => $country, 'daytime' => $daytime, 'night' => $night, 'fax' => $fax, 'payby' => $payby, 'payinfo' => $payinfo, 'paydate' => $paydate, 'payname' => $payname, 'invoicing_list' => $invoicing_list, 'referral_custnum' => $referral_custnum, 'pkgpart' => $pkgpart, 'username' => $username, 'sec_phrase' => $sec_phrase, '_password' => $password, 'popnum' => $popnum, 'agentnum' => $agentnum, } ); } if ( $error eq '_decline' ) { print_decline(); } elsif ( $error ) { print_form(); } else { print_okay(); } } else { die "unrecognized magic: ". $cgi->param('magic'); } } else { $error = ''; $last = ''; $first = ''; $ss = ''; $company = ''; $address1 = ''; $address2 = ''; $city = ''; $state = ''; $county = ''; $country = ''; $zip = ''; $daytime = ''; $night = ''; $fax = ''; $invoicing_list = ''; $payby = ''; $payinfo = ''; $paydate = ''; $payname = ''; $pkgpart = ''; $username = ''; $password = ''; $password2 = ''; $sec_phrase = ''; $popnum = ''; $referral_custnum = $cgi->param('ref') || ''; print_form; } sub print_form { $cgi->delete('ref'); $self_url = $cgi->self_url; $error = "Error: $error" if $error; print $cgi->header( '-expires' => 'now' ), $signup_template->fill_in(); } sub print_decline { print $cgi->header( '-expires' => 'now' ), $decline_template->fill_in(); } sub print_okay { my $user_agent = new HTTP::Headers::UserAgent $ENV{HTTP_USER_AGENT}; $cgi->param('username') =~ /^(.+)$/ or die "fatal: invalid username got past FS::SignupClient::new_customer"; my $username = $1; $cgi->param('_password') =~ /^(.+)$/ or die "fatal: invalid password got past FS::SignupClient::new_customer"; my $password = $1; ( $cgi->param('first'). ' '. $cgi->param('last') ) =~ /^(.*)$/ or die "fatal: invalid email_name got past FS::SignupClient::new_customer"; $email_name = $1; #global for template my $pop = pop_info($cgi->param('popnum')); #or die "fatal: invalid popnum got past FS::SignupClient::new_customer"; if ( $pop ) { ( $ac, $exch, $loc ) = ( $pop->{'ac'}, $pop->{'exch'}, $pop->{'loc'} ); } else { ( $ac, $exch, $loc ) = ( '', '', ''); #presumably you're not using them. } #global for template $pkg = ( grep { $_->{'pkgpart'} eq $pkgpart } @$packages )[0]->{'pkg'}; if ( $ieak_template && $user_agent->platform eq 'ia32' && $user_agent->os =~ /^win/ && ($user_agent->browser)[0] eq 'IE' ) { #send an IEAK config print $cgi->header('application/x-Internet-signup'), $ieak_template->fill_in(); } elsif ( $cck_template && $user_agent->platform eq 'ia32' && $user_agent->os =~ /^win/ && ($user_agent->browser)[0] eq 'Netscape' ) { #send a Netscape config my $cck_data = $cck_template->fill_in(); print $cgi->header('application/x-netscape-autoconfigure-dialer-v2'), map { m/(.*)\s+(.*)$/; pack("N", length($1)). $1. pack("N", length($2)). $2; } split(/\n/, $cck_data); } else { #send a simple confirmation print $cgi->header( '-expires' => 'now' ), $success_template->fill_in(); } } sub pop_info { my $popnum = shift; my $pop; foreach $pop ( @{$pops} ) { if ( $pop->{'popnum'} == $popnum ) { return $pop; } } ''; } #horrible false laziness with FS/FS/svc_acct_pop.pm::popselector sub popselector { my( $popnum, $state ) = @_; return '' unless @$pops; return $pops->[0]{city}. ', '. $pops->[0]{state}. ' ('. $pops->[0]{ac}. ')/'. $pops->[0]{exch}. '' if scalar(@$pops) == 1; my %pop = (); push @{ $pop{$_->{state}} }, $_ foreach @$pops; my $text = < function opt(what,href,text) { var optionName = new Option(text, href, false, false) var length = what.length; what.options[length] = optionName; } function popstate_changed(what) { state = what.options[what.selectedIndex].text; for (var i = what.form.popnum.length;i > 0;i--) what.form.popnum.options[i] = null; what.form.popnum.options[0] = new Option("", "", false, true); END foreach my $popstate ( sort { $a cmp $b } keys %pop ) { $text .= "\nif ( state == \"$popstate\" ) {\n"; foreach my $pop ( @{$pop{$popstate}}) { my $o_popnum = $pop->{popnum}; my $poptext = $pop->{city}. ', '. $pop->{state}. ' ('. $pop->{ac}. ')/'. $pop->{exch}; $text .= "opt(what.form.popnum, \"$o_popnum\", \"$poptext\");\n" } $text .= "}\n"; } $text .= "}\n\n"; $text .= qq!'; #callback? return 3 html pieces? #''; $text .= qq!'; $text; } sub expselect { my $prefix = shift; my $date = shift || ''; my( $m, $y ) = ( 0, 0 ); if ( $date =~ /^(\d{4})-(\d{2})-\d{2}$/ ) { #PostgreSQL date format ( $m, $y ) = ( $2, $1 ); } elsif ( $date =~ /^(\d{1,2})-(\d{1,2}-)?(\d{4}$)/ ) { ( $m, $y ) = ( $1, $3 ); } my $return = qq!!; for ( 2001 .. 2037 ) { $return .= "Signup successful Signup successful

Thanks for signing up!

Signup information for <%= $email_name %>:

Username: <%= $username %>
Password: <%= $password %>
Access number: (<%= $ac %>) / $exch - $local
Package: <%= $pkg %>
END } sub decline_default { #html to use if there is a decline <<'END'; Processing error Processing error

There has been an error processing your account. Please contact customer support. END } sub signup_default { #html to use if you don't specify a template file <<'END'; ISP Signup form ISP Signup form

<%= $error %>
Contact Information
*Contact name
(last, first)
,
Company
*Address
 
*City *State/Country *Zip
Day Phone
Night Phone
Fax
* required fields

Billing information <%= scalar(@payby) > 1 ? '' : '' %>
<%= $OUT .= ' Postal mail invoice
Email invoice
Billing type
<%= my $cardselect = ''; my %payby = ( 'CARD' => qq!Credit card
*$cardselect
*Exp !. expselect("CARD"). qq!
*Name on card
!, 'BILL' => qq!Billing
P.O.
*Exp !. expselect("BILL", "12-2037"). qq!
*Attention
!, 'COMP' => qq!Complimentary
*Approved by
*Exp !. expselect("COMP"), 'PREPAY' => qq!Prepaid card
*!, ); my %paybychecked = ( 'CARD' => qq!Credit card
*$cardselect
*Exp !. expselect("CARD", $paydate). qq!
*Name on card
!, 'BILL' => qq!Billing
P.O.
*Exp !. expselect("BILL", $paydate). qq!
*Attention
!, 'COMP' => qq!Complimentary
*Approved by
*Exp !. expselect("COMP", $paydate), 'PREPAY' => qq!Prepaid card
*!, ); for (@payby) { if ( scalar(@payby) == 1) { $OUT .= '"; } else { $OUT .= qq!!; } else { $OUT .= qq!> $payby{$_}!; } } } %>
'. qq!!. "$paybychecked{$_} $paybychecked{$_}
* required fields for each billing type

First package <%= if ( $init_data->{'security_phrase'} ) { $OUT .= < ENDOUT } else { $OUT .= ''; } %> <%= if ( scalar(@$pops) ) { $OUT .= ''; } else { $OUT .= popselector($popnum); } %>
Username
Password
Re-enter Password
Security Phrase
Access number'. popselector($popnum). '


END }