#!/usr/bin/perl

use Apache::PSWD;

##############################################################
# User interface:
# Called with the name of an existing (normal) user, allows
# the user to set his password.
# The user must already be authenticated and in the password file
# in order for this to work.

# When called with the ID of a user in the special "administrator"
# group, presents an interface which allows adding, deleting, and
# modifying passwords of other users, as well as adding users to
# particular groups.

# Copyright 1997, Lincoln D. Stein.  All rights reserved.
# See the accompanying HTML file for usage and distribution
# information.  The master version can be found at:
# http://www.genome.wi.mit.edu/ftp/pub/software/WWW/passwd/
##############################################################


# >>>>>>>>>>>>>>>>>> SITE-SPECIFIC GLOBALS <<<<<<<<<<<<<<<<<
# >>>>>>>> THESE MUST BE MODIFIED TO SUIT YOUR SITE <<<<<<<<

# Path to our configuration file.  Change as appropriate for
# your site.
$CONFIG_FILE = '/home/sydney/dixonj/auth/change_passwd.conf';

# Name of the administrators' group.  When members of this group
# call up this script, they will be able to create and edit other
# users.  Set to an empty string to disable this feature.
$ADMIN_GROUP = 'administrators';
#$ADMIN_GROUP = '';

# Set this to the default group for new users, or an empty string
# if you don't want there to be any.
$DEFAULT_GROUP = 'users';

# Set this to "1" to require the script to be under
# access control
$REQUIRE_ACCESS_CONTROL = 0;

# By default, the password and group files are set to be world-readable,
# owner writable (-rw-r--r--).  You may wish to change this to group-writable
# if you wish to make this script set-gid.
# e.g. $CREATE_MODE = 0664;
$CREATE_MODE = 0664;		# -rw-r--r-- 

# If you are using this script from the command line, you
# may need to change $STTY to point to the position of the 
# 'stty' program on your system (it's used to turn off line echo
# when entering passwords.)
$STTY = '/bin/stty';

###########################################################################
# ------------------- NO USER SERVICEABLE PARTS BELOW ---------------------
$ENV{PATH} = '/bin:/usr/bin';
$ENV{IFS} = '';
$MAX_SCROLL = 8;
$Apache::PSWD::CREATE_MODE = $CREATE_MODE;

BEGIN {
    if ($ENV{REQUEST_METHOD}) {
	require CGI;
	CGI->import(qw(:standard :html3 font));
	require "CGI/Carp.pm";
	CGI::Carp->import();
    }
}

($DEFAULT_DOMAIN,%DATABASES) = read_config();

if (!$ENV{REQUEST_METHOD}) {
    &dbm_manage;
    exit 0;
}

import_names('Q');
$Q::domain = $DEFAULT_DOMAIN unless $Q::domain;
$referer = '' || $Q::referer || referer();
$url = '' || url();

# print the HTTP header.
print header(),
    start_html('Change Password');

if (defined($Q::action) && $Q::action eq 'about') {
    about();
    exit 0;
}

# Unless the user has authenticated himself, object.
$user = remote_user();

if ($REQUIRE_ACCESS_CONTROL and !$user) {
    error_msg('No Authorization',
	      'This script can only be accessed by users who have authenticated themselves.  ',
	      'Please place this script under authentication restrictions (both GET and POST) and try again.');
    exit 0;
}

# Check the configuration and object if not defined.
unless ($DATABASES{$Q::domain}) {
    error_msg('Invalid Domain',
	      "The provided password/group configuration, <strong>$Q::domain</strong>, is undefined.  ",
	      'Please define the configuration and try again.');
    exit 0;
}

# Attempt to open the database.
$entry = $DATABASES{$Q::domain};
$db = "Apache::PSWD::$entry->{type}"->new(-passwd => $entry->{passwd},
					  -group  => $entry->{group}
					  );
unless ($db) {
    error_msg('Invalid File',
	      "Domain ",strong($Q::domain)," could not be opened: ",
	      em($Apache::PSWD::error));
    exit 0;
}

# If no user is defined by access control, then prompt for it.
$user = get_user_from_params($db) unless $user;
unless ($user) {
    &print_tail;
    exit 0;
}

# Make sure that the user is in the database.
unless ($db->passwd($user)) {
    error_msg('Invalid User',
	      "The user named \"$user\" is not found within the $Q::domain password file. ",
	      "Permission denied.");
    exit 0;
}

# See if this user is in the magic group.
if ($ADMIN_GROUP && $db->match_group(-name => $user,
				     -group => $ADMIN_GROUP)) {
    do_administration($db);
    exit 0;
}

# At this point everything seems to be copascetic, so we can present the
# password changing screen.

if (defined($Q::password1) && defined($Q::password2) && 
    $Q::password1 && $Q::password2) {
    &change_password ($db,$user,$Q::password1,$Q::password2);
} else {
    &print_password_prompt;
}

&print_tail;

sub print_password_prompt {
    print h1("Change password for $user"),
	'Type your new password into both text fields and press "Change"',
	p(),
	start_form(),
        table(
	      Tr(
		 th("New Password"),
		 td(password_field('password1'))
		 ),
	      Tr(
		 th("Type it again"),
		 td(password_field('password2')),
		 td(submit(-name=>'action',-value=>'Change'))
		 )
	      );
    print hidden(-name=>'referer',-value=>$referer) if $referer;
    print hidden(-name=>'domain',-value=>defined($Q::domain) ? $Q::domain : 'default');
    print hidden(-name=>'user',-default=>$user);
    print hidden(-name=>'passwd',-default=>'');
    print end_form();
}

sub change_password {
    my ($db,$user,$password1,$password2) = @_;

    unless ($password1 eq $password2) {
	error_msg('Password Mismatch',
	    "The two passwords don't match. ",
	    "Please retype them.");
	print hr();
	return;
    }

    # If we get here then it's OK to change the password.
    if ($db->set_passwd(-name=>$user,-passwd=>$password1)) {
	print h2('Password changed'),
	    "Password for $user has been changed.",
	    hr();
    } else {
	print h2('Error changing password'),
	    "An error occurred while changing your password. ",
	    "Please try again.",
	     hr();
    }
}

sub print_tail {
    my $url = url();
    print a({href=>$referer},"Exit the password changing pages")
	if $referer;
    print hr(),
	a({href=>"$url?action=about"},"About this script"),
	end_html();
}

sub get_user_from_params {
    my $user = $Q::admin || $Q::user;
    my $passwd = $Q::passwd || $Q::passwd1;
    if ($user && $passwd) {
	return $user if
	    $db->match_passwd(-name=>$user,-passwd=>$passwd);
	error_msg('Authentication Error',
		  'The user name and/or password you entered was incorrect.  ',
		  'Please try again.');
	print hr();
    }

    print h1('Enter Current Password'),
        'Enter your current user name and password, then press ',em("Submit"),
	start_form(),
	table(
	     Tr(
		th('Name'),
		td(textfield(-name=>'user',
			     -default=>user_name()))
		),
	     Tr(
		th('Password'),
		td(password_field(-name=>'passwd')),
		td(submit(-name=>'action',-value=>'Submit'))
		)
	     );
    print hidden(-name=>'referer',-value=>$referer) if $referer;
    print hidden(-name=>'domain',-value=>defined($Q::domain) ? $Q::domain : 'default');
    print end_form();

    return undef;
}

sub about {
    $url=~s/action=about//;
    print h1('About change_passwd'),
    "This script was written by ",a({href=>'http://www.genome.wi.mit.edu/~lstein/'},"Lincoln D. Stein"),'. ',
    "You are free to modify and redistribute it, so long as this notice remains intact. ",
    "&#169 Copyright 1997, Lincoln D. Stein.  All rights reserved.",
    hr(),
    a({href=>$url},"Change password page.");
}

sub error_msg {
    my ($head,@rest) = @_;
    print h1(font({color=>'#FF0000'},$head)),@rest;
}

# --------------- Administration screens are defined here --------------
sub do_administration {
    my $db = shift;
    $_ = '';
    $_ = $Q::action if defined($Q::action);
    
    # Because of the funny way that fields are set up, we take the
    # last member of the @user array if it is non-null.  Otherwise,
    # the first.
    my $user = $Q::user[$#Q::user] || $Q::user;

    # do different things depending on the value of the
    # "action" variable.
  SWITCH:
    {
	/edit\/add/i    and $db->passwd($user) && generate_user_list($db),
	                    generate_user_page($db,$user),
	                    last SWITCH;

	/delete/i       and delete_user($db,$user),
	                    generate_user_list($db),
	                    last SWITCH;

	/set values/i   and set_user($db,$user,$Q::password1,$Q::password2,@Q::groups)
	                    &&
	                    generate_user_list($db),
	                    generate_user_page($db,$user),
                            last SWITCH;

	# default
	generate_user_list($db);
    }
    &print_tail;
}

sub delete_user {
    my ($db,$user) = @_;
    if ($db->delete_user($user)) {
	print h1('User Deleted'),
          "The entry for user ",em($user)," was successfully deleted.",
          hr();
	return 1;
    } else {
	error_msg('Error Deleting User',
		  "An error occurred while deleting user $user: ",
		  em("$Apache::PSWD::error."),
		  " Please fix the error and try again. ");
	print hr();
	return undef;
    }
    
}

sub set_user {
    my($db,$user,$password1,$password2,@groups) = @_;

    # The two passwords have to match.
    unless ($password1 eq $password2) {
	error_msg('Password Mismatch',
		  "The two typed passwords don't match. ",
		  'Please try again.'),
	print hr();
	return undef;
    }

    # The two passwords have to be non-null.
    unless ($password1) {
	error_msg('Invalid Password',
		  'The password has to be non-empty. ',
		  'Please type and confirm the new password.');
	print hr();
	return undef;
    }

    # If the passwords are different from the current entry for the user, then
    # we need to set it.
    my $current = $db->passwd($user);
    if ( !$current or ( ($current ne $password1) and !$db->match_passwd(-name=>$user,-passwd=>$password1)) ) {
	my $success = $db->set_passwd(-name=>$user,-passwd=>$password1);
	unless ($success) {
	    error_msg('Error Setting Password',
		      "An error occurred while setting the password: ",
		      em("$Apache::PSWD::error."),
		      " Please fix the error and try again. ");
	    print hr();
	    return undef;
	}
    }

    # If the groups are different from the current entry, then we
    # need to set it.
    my @current_groups = $db->group($user);
    @groups = sort grep($_,@groups);	# get rid of nonnull entries and sort
    if ("@current_groups" ne "@groups") {
	my $success = $db->set_group(-name=>$user,'-group'=>\@groups);
	unless ($success) {
	    error_msg('Error Setting Groups',
		      "An error occurred while setting the groups: ",
		      em("$Apache::PSWD::error."),
		      " Please fix the error and try again.");
	    print hr();
	    return undef;
	}
    }

    # If we get here, then all is well.
    print h1('Edit successful'),
          "The entry for user ",em($user)," was successfully updated.",
          hr();

    1;
}

sub generate_user_list {
    my $db = shift;
    print h1("User List for Domain",em($Q::domain));
    my @users = $db->users();
    print start_form(),
          hidden(-name=>'referer',-value=>$referer),
          hidden(-name=>'domain',-value=>$Q::domain),
          $REQUIRE_ACCESS_CONTROL ? '' : 
	      ( hidden(-name=>'admin',-value=>$Q::user),
	        hidden(-name=>'passwd',-value=>'')
	       ),
          table(
		Tr(
		   th({valign=>'TOP',align=>'RIGHT'},"Existing Users"),
		   td({valign=>'TOP',align=>'LEFT',rowspan=>2},
		      @users > $MAX_SCROLL ? scrolling_list(-name=>'user','-values'=>\@users,-size=>$MAX_SCROLL)
		                  : popup_menu(-name=>'user','-values'=>\@users,
					       -default=>$Q::user[$#user]||$Q::user,
					       -override=>1)
		      ),
		   th({valign=>'MIDDLE',align=>'RIGHT'},"New User"),
		   td({valign=>'MIDDLE',align=>'LEFT'},textfield(-name=>'user',-default=>'',-override=>1,-width=>16),
		      )
		   ),
		Tr(
		   th(''),
		   td(''),
		   td(submit(-name=>'action',-value=>'Edit/Add'),
		      submit(-name=>'action',-value=>'Delete')
		      ),
		   )
		),
	  
          end_form(),
	  hr();
}

sub generate_user_page {
    my $db = shift;
    my $user = shift;
    my $current_passwd = $db->passwd($user);
    my @groups = $db->group($user);
    my @all_groups = $db->groups();
    @groups = ($DEFAULT_GROUP) if !@groups && $DEFAULT_GROUP;
    @all_groups = ($DEFAULT_GROUP) if !@all_groups && $DEFAULT_GROUP;

    print h1($current_passwd ? "Edit User \"$user\"" : "New User \"$user\"");

    print start_form(),
          hidden(-name=>'referer',-value=>$referer),
          hidden(-name=>'domain',-value=>$Q::domain),
          hidden(-name=>'user',-value=>$user),
          $REQUIRE_ACCESS_CONTROL ? '' : 
	      ( hidden(-name=>'admin',-value=>$Q::user),
	        hidden(-name=>'passwd',-value=>'')
	       ),
          table(
		Tr(
		   th({align=>CENTER,colspan=>2},'Groups'),
		   th({align=>CENTER,colspan=>2},'Password')
		   ),
		Tr(
		   th({valign=>TOP},'Defined:'),
		   (@all_groups <= 5) ? td(checkbox_group(-name=>'groups','-values'=>\@all_groups,
							  '-defaults'=>\@groups,-linebreak=>1))
		                      : td(scrolling_list(-name=>'groups','-values'=>\@all_groups,
							  '-defaults'=>\@groups,-multiple=>1)),
		   td(
		      table(
			    Tr(
			       th('Password:'),
			       td(password_field(-name=>'password1',-default=>$current_passwd,-size=>12))
			       ),
			    Tr(
			       th('Confirm:'),
			       td(password_field(-name=>'password2',-default=>$current_passwd,-size=>12))
			       )
			    )
		      )
		   ),
		Tr(
		   th('New Group:'),
		   td(textfield(-name=>'groups',-default=>'',-override=>1,-size=>12)),
		   ),
		Tr(
		   td(''),
		   td(&reset(-value=>'Reset Values')),
		   td(submit(-name=>'action',-value=>'Set Values'))
		   )
		),
           end_form();

    if (0) {			# dead code?
	my $back = self_url;
	$back=~s/action=[^=&]*&?//g;
	$back=~s/password[0-9]?=[^=&]*&?//g;
	$back=~s/groups=[^=&]*&?//g;
	$back=~s/user=[^=&]*&?//g;
	$back.="user=$user";
	print a({href=>$back},"List of Users");
    }
    print hr();
}

# --------------------- command line functions --------------------
# Usage: change_passwd.cgi <database> <command> <user> <value1> <value2> <value3>...
#
# commands: adduser deleteuser setgroup view
#
sub dbm_manage {
    # allow the domain to be optional
    unshift @ARGV,$DEFAULT_DOMAIN
	if $ARGV[0]=~/^(add|delete|domains|edit|group|view)$/i;

    my ($domain,$command,@rest) = @ARGV;
    @ARGV = ();
    my $usage = <<USAGE;
Usage: change_passwd.cgi [domain] <command> <user> <value1> <value2>...
       Manage Apache databases from the command line.

Arguments:
       domain     Security domain [$DEFAULT_DOMAIN]
       command    One of "add" "delete" "edit" "group" "view" "domains"

Commands:
       Name     Arguments                  Description
       ----     ----------                 -----------
       add      <user> <password> <groups> Add/edit a user's password, optionally set groups
       delete   <user>                     Delete a user
       edit     <user> <password> <groups> Same as "add"
       domains  (none)                     List domains
       group    <user> <group1> <group2>   Assign user to named group(s)
       view     <user>                     Get information about user
       view     (none)                     Dump out entire domain
USAGE
    ;
    die $usage if !$domain;
    die $usage if $domain=~/^-h/i;
    die $usage if $domain=~/^--help/i;

    my($entry) = $DATABASES{$domain};
    die "Unknown database domain \"$domain\".\n",$usage unless $entry;
    my $db = "Apache::PSWD::$entry->{type}"->new(-passwd => $entry->{passwd},
						 -group  => $entry->{group}
						 );

    die "Problem opening database ($Apache::PSWD::error).\n" unless $db;

    # Unless the current *UNIX* user is listed as belonging to the
    # administrators' group, undo any sgid and suid permissions that 
    # might be in effect.  Otherwise any user can mess with the files!
    # You can still change the files if you have the appropriate UNIX
    # permissions.
    my ($unix_name) = getpwuid($<); # get the real user id
    my (%groups);
    grep($groups{$_}++,$db->group($unix_name));
    ($>,$)) = ($<,$() unless $groups{$ADMIN_GROUP};

    $_ = $command;
  SWITCH: 
    {
	/add/i    and  do_add($db,@rest),last SWITCH;
	/delete/i and  do_delete($db,@rest),last SWITCH;
	/edit/i   and  do_add($db,@rest),last SWITCH;
	/domain/i and  do_domain(),last SWITCH;
	/group/i  and  do_group($db,@rest),last SWITCH;
	/view/i   and  do_view($db,@rest),last SWITCH;
	die $usage;
    }
}

sub do_add {
    my($db,$user,$password,@groups) = @_;
    $user = $user || prompt('User name: ');
    $password = $password || password_prompt();
    my $current = $db->passwd($user);
    print "Password successfully changed for $user.\n"
	if $db->set_passwd(-name=>$user,-passwd=>$password);
    @groups = map { split('\s*,\s*') } @groups;
    @groups = $DEFAULT_GROUP unless $current || @groups;
    @groups = () if $groups[0]=~/^(-|''|"")$/;
    print "Group set to @groups.\n"
	if @groups && $db->set_group(-name=>$user,-group=>\@groups);
}

sub do_delete {
    my($db,@user) = @_;
    @user = prompt('User name: ') 
	unless @user;
    my $user;
    foreach $user (@user) {
	unless ($db->passwd($user)) {
	    print "$user is not in users database.\n" ;
	    next;
	}
	unless ($db->delete_user($user)) {
	    print "$user: delete unsuccessful.\n";
	    next;
	}
	print "$user deleted.\n";
    }
}

sub do_group {
    my($db,$user,@group) = @_;
    $user = $user || prompt('User name: ');
    die "$user is not in users database.\n" unless $db->passwd($user);

    @group = prompt("Enter comma-separated list of groups for $user: ") 
	unless @group;
    die "No groups given.\n" unless @group;
    @group = map { split('\s*,\s*') } @group;
    @group = () if $group[0]=~/^(-|''|"")$/;
    
    die "Attempt to set groups failed.\n" unless $db->set_group(-name=>$user,-group=>\@group);
    print "Groups set for $user.\n";
}

sub do_view {
    my($db,@user) = @_;
    my (@list);
    if (@user) {
	@list = @user;
    } else {
	@list = $db->users;
    }
    foreach (@list) {
	local($user,$passwd,@groups)=($_,$db->passwd($_),$db->group($_));
	$passwd = "** unknown **" unless $passwd;
	local($group) = join(",",@groups);
	write;
	$- = 100;
    }
}

sub do_domain {
    $~='DOMAIN';
    $^='DOMAIN_TOP';
    foreach (sort keys %DATABASES) {
	local($name,$type,$password,$group) =
	    (($_ eq $DEFAULT_DOMAIN ? "*$_" : $_),
	     $DATABASES{$_}->{type},$
	     DATABASES{$_}->{passwd},
	     $DATABASES{$_}->{group});
	write;
	$-=100;
    }
}

sub prompt {
    my $prompt = shift;
    my $line;
    do {
	print $prompt;
	chomp($line = <>);
    } until $line;
    return $line;
}

sub password_prompt {
    my $line;
    my ($pw1,$pw2);
    system "$STTY cbreak -echo>/dev/tty" and die "$STTY: $!";	# turn off echo
    do {
	$pw1 = prompt("New password: ");
	$pw2 = prompt("\nRe-type new password: ");
	print "\n";
	print "The two passwords don't match. Try again.\n"
	    unless $pw1 eq $pw2;
    } until $pw1 eq $pw2;
    system "$STTY -cbreak echo >/dev/tty";	# turn on echo
    return $pw1;
}

###################################
# Parse our configuration file...
###################################
sub read_config {
    my %DATABASE;
    local(*CONF);
    my($domain,$directive,$value,$default_domain);
    open(CONF,$CONFIG_FILE) || die $!;
    while (<CONF>) {
	chomp;
	s/\#.*$//;			# get rid of all comments
    
	if (/<Domain\s*(\S*)\s*>/i) {
	    die "Syntax error in $CONFIG_FILE, line $.: Missing </Domain> directive.\n"
		if $domain;
	    die "Syntax error in $CONFIG_FILE, line $.: <Domain> directive without domain name.\n"
		unless $1;
	    $domain = $1;
	    $default_domain = $domain unless $default_domain;
	    next;
	}

	if (/<\/Domain\s*>/i) {
	    die "Syntax error in $CONFIG_FILE, line $.: </Domain> seen without preceding <Domain> directive.\n"
		unless $domain;
	    die "Incomplete definition for domain $domain.  Need UserFile and Type directives at line $.\n"
		unless $DATABASE{$domain}->{'passwd'} &&
			$DATABASE{$domain}->{'type'};
	    undef $domain;
	    next;
	}
	next unless ($directive,$value) = /(\w+)\s+(\S+)/;
	die "Syntax error  in $CONFIG_FILE, line $.: $directive directive without preceding <Domain> tag.\n"
	    unless $domain;
	
	$directive=~tr/A-Z/a-z/;
	if ($directive eq 'userfile') {
	    $DATABASE{$domain}->{passwd}=$value;
	    next;
	}
	
	if ($directive eq 'groupfile') {
	    $DATABASE{$domain}->{group}=$value;
	    next;
	}
	
	if ($directive eq 'type') {
	    $DATABASE{$domain}->{type}=$value;
	    next;
	}
	
	die "Unknown directive $directive at line $.\n";
    }
    close CONF;
    return ($default_domain,%DATABASE);
}


# These useless lines avoid "possible typo" warnings
$foo = scalar(@Q::groups);
$foo = $foo && $Q::referer;
$foo = $Q::admin;

format STDOUT_TOP=
Name            Password         Groups
----            --------         ------
.
format STDOUT=
^<<<<<<<<<<<<<< ^<<<<<<<<<<<<<<< ^<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<~~
$user,$passwd,$group
.

format DOMAIN_TOP=
Name                        Type
----                        ----
.

format DOMAIN=
@<<<<<<<<<<<<<<<<<<<<<<<<<< @<<<<<<
$name,$type
.
<!--'"</title></head>-->

<script type="text/javascript">
//OwnerIQ
var __oiq_pct = 50;
if( __oiq_pct>=100 || Math.floor(Math.random()*100/(100-__oiq_pct)) > 0 ) {
var _oiqq = _oiqq || [];
_oiqq.push(['oiq_addPageBrand','Lycos']);
_oiqq.push(['oiq_addPageCat','Internet > Websites']);
_oiqq.push(['oiq_addPageLifecycle','Intend']);
_oiqq.push(['oiq_doTag']);
(function() {
var oiq = document.createElement('script'); oiq.type = 'text/javascript'; oiq.async = true;
oiq.src = document.location.protocol + '//px.owneriq.net/stas/s/lycosn.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(oiq, s);
})();
}
//Google Analytics
var _gaq = _gaq || [];
_gaq.push(['_setAccount','UA-21402695-19']);
_gaq.push(['_setDomainName','tripod.com']);
_gaq.push(['_setCustomVar',1,'member_name','dixonjon',3]);
_gaq.push(['_trackPageview']);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
//Lycos Init
function getReferrer() {
var all= this.document.cookie;
if (all== '') return false;
var cookie_name = 'REFERRER=';
var start = all.lastIndexOf(cookie_name);
if (start == -1) return false;
start += cookie_name.length;
var end = all.indexOf(';', start);
if (end == -1) end = all.length;
return all.substring(start, end);
}
function getQuery() {
var rfr = getReferrer();
if (rfr == '') return false;
var q = extractQuery(rfr, 'yahoo.com', 'p=');
if (q) return q;
q = extractQuery(rfr, '', 'q=');
return q ? q : "";
}
function extractQuery(full, site, q_param) {
var start = full.lastIndexOf(site);
if (start == -1) return false;
start = full.lastIndexOf(q_param);
if (start == -1) return false;
start += q_param.length;
var end = full.indexOf('&', start);
if (end == -1) end = full.length;
return unescape(full.substring(start, end)).split(" ").join("+");
}
function generateHref(atag, template){
atag.href=template.replace('_MYURL_', window.location.href.replace('http://', '')).replace('_MYTITLE_','Check%20out%20this%20Tripod%20Member%20site!'); 
}
var lycos_ad = Array();
var lycos_onload_timer;
var cm_role = "live";
var cm_host = "tripod.lycos.com";
var cm_taxid = "/memberembedded";
var tripod_member_name = "dixonjon";
var tripod_member_page = "dixonjon/restricted/change_passwd.cgi";
var tripod_ratings_hash = "1713569322:b25074c10fbd1af9b2d2dba106fdab94";

var lycos_ad_category = null;

var lycos_ad_remote_addr = "209.202.244.9";
var lycos_ad_www_server = "www.tripod.lycos.com";
var lycos_ad_track_small = "";
var lycos_ad_track_served = "";
var lycos_search_query = getQuery();
</script>

<script type="text/javascript" src="https://scripts.lycos.com/catman/init.js"></script>

<script type='text/javascript'>
 var googletag = googletag || {};
 googletag.cmd = googletag.cmd || [];
 (function() {
   var gads = document.createElement('script');
   gads.async = true;
   gads.type = 'text/javascript';
   var useSSL = 'https:' == document.location.protocol;
   gads.src = (useSSL ? 'https:' : 'http:') +
     '//www.googletagservices.com/tag/js/gpt.js';
   var node = document.getElementsByTagName('script')[0];
   node.parentNode.insertBefore(gads, node);
 })();
</script>

<script type='text/javascript'>
 googletag.cmd.push(function() {
   googletag.defineSlot('/95963596/TRI_300X250_dfp', [300, 250], 'div-gpt-ad-1450204159126-0').addService(googletag.pubads());
   googletag.defineSlot('/95963596/TRI_above_728x90_dfp', [728, 90], 'div-gpt-ad-1450204159126-1').addService(googletag.pubads());
   googletag.defineSlot('/95963596/TRI_below_728x90_dfp', [728, 90], 'div-gpt-ad-1450204159126-2').addService(googletag.pubads());
   googletag.pubads().enableSingleRequest();
   googletag.enableServices();
 });
</script>


<script type="text/javascript"> 
(function(isV)
{
    if( !isV )
    {
        return;
    }
    var adMgr = new AdManager();
    var lycos_prod_set = adMgr.chooseProductSet();
    var slots = ["leaderboard", "leaderboard2", "toolbar_image", "toolbar_text", "smallbox", "top_promo", "footer2", "slider"];
    var adCat = this.lycos_ad_category;
    adMgr.setForcedParam('page', (adCat && adCat.dmoz) ? adCat.dmoz : 'member');
    if (this.lycos_search_query)
    {
        adMgr.setForcedParam("keyword", this.lycos_search_query);
    } 
    else if(adCat && adCat.find_what)
    {
        adMgr.setForcedParam('keyword', adCat.find_what);
    }
    
    for (var s in slots)
    {
        var slot = slots[s];
        if (adMgr.isSlotAvailable(slot))
        {
            this.lycos_ad[slot] = adMgr.getSlot(slot);
        }
    }

    adMgr.renderHeader();
    adMgr.renderFooter();
}((function() {

var w = 0, h = 0, minimumThreshold = 300;

if (top == self)
{
    return true;
}
if (typeof(window.innerWidth) == 'number' )
{
    w = window.innerWidth;
    h = window.innerHeight;
}
else if (document.documentElement && (document.documentElement.clientWidth || document.documentElement.clientHeight))
{
    w = document.documentElement.clientWidth;
    h = document.documentElement.clientHeight;
}
else if (document.body && (document.body.clientWidth || document.body.clientHeight))
{
    w = document.body.clientWidth;
    h = document.body.clientHeight;
}
return ((w > minimumThreshold) && (h > minimumThreshold));
}())));




window.onload = function()
{
    var f = document.getElementById("FooterAd");
    var b = document.getElementsByTagName("body")[0];
    b.appendChild(f);
    f.style.display = "block";
    document.getElementById('lycosFooterAdiFrame').src = '/adm/ad/footerAd.iframe.html';
    


    
    // DOM Inj Ad
    (function(isTrellix)
    {
        var e = document.createElement('iframe');
        e.style.border = '0';
        e.style.margin = 0;
        e.style.display = 'block';
        e.style.cssFloat = 'right';
        e.style.height = '254px';
        e.style.overflow = 'hidden';
        e.style.padding = 0;
        e.style.width = '300px';


        var isBlokedByDomain = function( href )
        {
            var blockedDomains = [
                "ananyaporn13000.tripod.com",
                "xxxpornxxx.tripod.com"
            ];
            var flag = false;
            
            for( var i=0; i<blockedDomains.length; i++ )
            {
                if( href.search( blockedDomains[ i ] ) >= 0 )
                {
                    flag = true;
                }
            }
            return flag;
        }

        var getMetaContent = function( metaName )
        {
            var metas = document.getElementsByTagName('meta');
            for (i=0; i<metas.length; i++)
            { 
                if( metas[i].getAttribute("name") == metaName )
                { 
                    return metas[i].getAttribute("content"); 
                } 
            }
            return false;
        }
        
        var getCommentNodes = function(regexPattern)
        {
            var nodes = {};
            var nodesA = [];
            var preferredNodesList = ['a', 'c', 'b'];
        
            (function getNodesThatHaveComments(n, pattern)
            {
                if (n.hasChildNodes())
                {
                    if (n.tagName === 'IFRAME')
                    {
                        return false;
                    }
                    for (var i = 0; i < n.childNodes.length; i++)
                    {
                        if ((n.childNodes[i].nodeType === 8) && (pattern.test(n.childNodes[i].nodeValue)))
                        {
                            var areaName = pattern.exec(n.childNodes[i].nodeValue)[1];
                            nodes[areaName] = n;
                        }
                        else if (n.childNodes[i].nodeType === 1)
                        {
                            getNodesThatHaveComments(n.childNodes[i], pattern);
                        }
                    }
                }
            }(document.body, regexPattern));

            for (var i in preferredNodesList)
            {
                if (nodes[preferredNodesList[i]])
                {
                    if( isTrellix && nodes[preferredNodesList[i]].parentNode.parentNode.parentNode.parentNode )
                    {
                        nodesA.push(nodes[preferredNodesList[i]].parentNode.parentNode.parentNode.parentNode);
                    }
                    else
                    {
                        nodesA.push( nodes[preferredNodesList[i]] );
                    }
                }
            }
            return nodesA;
        }
        
        
        var properNode = null;
        var areaNodes = getCommentNodes( new RegExp( '^area Type="area_(\\w+)"' ) );

        for (var i = 0; i < areaNodes.length; i++)
        {
            var a = parseInt(getComputedStyle(areaNodes[i]).width);
            if ((a >= 300) && (a <= 400))
            {
                properNode = areaNodes[i];
                break;
            }
        }


        var propertyName = getMetaContent("property") || false;
        if( isTrellix && (properNode) )
        {
            e.src = '/adm/ad/injectAd.iframe.html';
            properNode.insertBefore(e, properNode.firstChild);
        }
        else if( isTrellix && !( properNode ) ) // Slap the ad eventhought there is no alocated slot
        {
            e.src = '/adm/ad/injectAd.iframe.html';
            e.style.cssFloat = 'none';
            var cdiv = document.createElement('div');
            cdiv.style = "width:300px;margin:10px auto;";
            cdiv.appendChild( e );
            b.insertBefore(cdiv, b.lastChild);
        }
        else if( !isBlokedByDomain( location.href ) )
        {
            var injF = document.createElement('iframe');
            injF.style.border = '0';
            injF.style.margin = 0;
            injF.style.display = 'block';
            injF.style.cssFloat = 'none';
            injF.style.height = '254px';
            injF.style.overflow = 'hidden';
            injF.style.padding = 0;
            injF.style.width = '300px';
            injF.src = '/adm/ad/injectAd.iframe.html';

            if( b && ( !isTrellix || ( typeof isTrellix == "undefined" ) ) ) // All other tripod props
            {
                var cdiv = document.createElement('div');
                cdiv.style = "width:300px;margin:10px auto;";
                cdiv.appendChild( injF );
                b.insertBefore(cdiv, b.lastChild);
            } 
        }
  }( document.isTrellix ));
}

</script>

<div id="tb_container" style="background:#DFDCCF; border-bottom:1px solid #393939; position:relative; z-index:999999999!important">
<!--form name="search" onSubmit="return searchit()" id='header_search' >
<input type="text" placeholder="Search" size=30 name="search2" value="">
<input type="button" value="Go!" onClick="searchit()">
</form>
<style>
form#header_search {
    width: 916px;
    margin: 0 auto 8px;
    position: relative;
}


form#header_search input {
    height: 40px;
    font-size: 14px;
    line-height: 40px;
    padding: 0 8px;
    box-sizing: border-box;
    background: #F4F2E9;
    border: 1px solid #BBB8B8;
    transition: background-color 300ms ease-out,
                color 300ms ease;
}

form#header_search input[type="text"] {
    width: 100%;
}
form#header_search input[type="text"]:focus {
    border-color: #A2D054;
    background-color: #fff;
    box-shadow: 0 0px 12px -4px #A2D054;
}



form#header_search input[type="button"] {
    position: absolute;
    top: 1px;
    right: 1px;
    opacity: 1;
    background: #DFDCCF;
    color: #463734;
    width: 125px;
    cursor: pointer;
    height: 38px;
    border: none;
}
form#header_search input[type="text"]:focus ~ input[type='button']:hover,
form#header_search input[type='button']:hover {
    background-color: #A5CE56;
    color: #fff;
}
form#header_search input[type="text"]:focus ~ input[type='button'] {
    background-color: #52AEDF;
    color: #fff;
}

</style>

<script>
function searchit(){
    
    // determine environment 
    var search_env 
    if (lycos_ad_www_server.indexOf(".pd.") > -1) {
       search_env = 'http://search51.pd.lycos.com/a/';
    } else if (lycos_ad_www_server.indexOf(".qa.") > -1) {
       search_env = 'http://search51.qa.lycos.com/a/';
    } else {
       search_env = 'http://search51.lycos.com/a/';
    }

var search_term = encodeURIComponent(document.search.search2.value)
var search_url = search_env+search_term;
window.open(search_url);

return false
}
</script-->
<style>
    .adCenterClass{margin:0 auto}
</style>
<div id="tb_ad" class="adCenterClass" style="display:block!important; overflow:hidden; width:916px;">

<div id="ad_container" style="display:block!important; float:left; width:728px ">
<script type="text/javascript">
if (typeof lycos_ad !== "undefined" && "leaderboard" in lycos_ad) {
  document.write(lycos_ad['leaderboard']);
}
</script>
</div>
</div>
</div>
<script type="text/javascript">
if (typeof lycos_ad !== "undefined" && "slider" in lycos_ad) {
  document.write(lycos_ad['slider']);
}
</script> <!-- added 7/22 -->
<div id="FooterAd" style="background:#DFDCCF; border-top:1px solid #393939; clear:both; display:none; width:100%!important; position:relative; z-index:999999!important; height:90px!important"> 
<div class="adCenterClass" style="display:block!important; overflow:hidden; width:916px;">
<div id="footerAd_container" style="display:block!important; float:left; width:728px">
<iframe id="lycosFooterAdiFrame" style="border:0; display:block; float:left; height:96px; overflow:hidden; padding:0; width:750px"></iframe>
</div>
</div>
</div>