pjs/webtools/despot/despot.cgi

#!/usr/bonsaitools/bin/perl -w
# -*- Mode: perl; indent-tabs-mode: nil -*-
#
# The contents of this file are subject to the Mozilla Public License
# Version 1.0 (the "License"); you may not use this file except in
# compliance with the License. You may obtain a copy of the License at
# http://www.mozilla.org/MPL/
# 
# Software distributed under the License is distributed on an "AS IS"
# basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See the
# License for the specific language governing rights and limitations
# under the License.
# 
# The Original Code is the Despot Account Administration System.
# 
# The Initial Developer of the Original Code is Netscape Communications
# Corporation. Portions created by Netscape are Copyright (C) 1998
# Netscape Communications Corporation. All Rights Reserved.
# 
# Contributor(s): Terry Weissman <terry@mozilla.org>

use diagnostics;

use CGI::Carp qw(fatalsToBrowser);

use CGI qw(:standard :html3);

require 'utils.pl';

$POSTTYPE = "Post";

$| = 1;

$despot = param("_despot");
if (!defined $despot) {
    $despot = 0;
}

print header();

$bg = "white";
$extra = "";
if ($despot) {
    $bg = "lightgreen";
    $extra = " (Wonder-twin powers -- activate!)";
}

print start_html(-Title=>"Despot -- configure mozilla users$extra",
                 -BGCOLOR=>$bg);

if (!param()) {
    print h1("Despot -- access control for mozilla.org.");
    print h2("Login, please.");
    print img({-align=>"right",-width=>72,-height=>84,-src=>"handcuff.gif"});
    print p("To manage mozilla users, or to change your mozilla.org " .
            "password, you must first log in.");
    print start_form(-method=>$POSTTYPE);
    print table(Tr(th({-align=>"right"}, "Email address:"),
                   td(textfield(-name=>"loginname",
                                -size=>20))),
                Tr(th({-align=>"right"}, "Password:"),
                   td(password_field(-name=>"loginpassword",
                                     -size=>20))));
    print submit(-name=>"Log in");
    print hr();
    print p("If you think you should be able to use this system, but you
haven't been issued a login, please send mail to " .
            a({href=>"mailto:terry"}, "terry") . ".");
    exit;
}

import_names("F");              # Makes all form values available as F::.

# $F::debug = 1;

use Mysql;

$db = Mysql->Connect("localhost", "mozusers", $F::loginname, "")
    || die "Can't connect to database server";


$query = Query("select passwd,despot,neednewpassword,id from users where email = '$F::loginname'");
@row = $query->fetchrow();
if (!@row || !checkpassword($F::loginpassword, $row[0])) {
    if ($F::loginname !~ /@/) {
        Punt("You must type in your full e-mail address, including the '\@'.");
    } else {
        Punt("Invalid login (bad email address, or bad password).");
    }
}

$candespot = 0;
if ($row[1] eq "Yes") {
    $candespot = 1;
} else {
    $despot = 0;
}

$neednewpassword = 0;
if ($row[2] eq "Yes") {
    $neednewpassword = 1;
}

$loginid = $row[3];

$skiptrailer = 0;

if (defined $F::command) {
    $cmd = $F::command;
    param("command", "");
    eval "$cmd()";
    if ($@ ne "") {
        die "Error executing $cmd -- $@";
    }
} else {
    MainMenu();
}


if (!$skiptrailer) {
    print hr();
    print MyForm("MainMenu") . submit("Main menu") . end_form();
}


$query = Query("select needed from syncneeded where needed=1");
@row = $query->fetchrow();
if ($row[0]) {
    print hr();
    print p("Updating external machines...");
    print "<PRE>";
    if (!open(DOSYNC, "./syncit.pl -user $F::loginname|")) {
        print p("Can't do sync (error $?).  Please send mail to " .
                a({href=>"mailto:terry@mozilla.org"}, "terry") . ".");
    } else {
        while (<DOSYNC>) {
            if ($despot) {
                s/\&/\&amp;/g;
                s/</\&lt;/g;
                s/>/\&gt;/g;
                print $_;
            }
        }
        close(DOSYNC);
    }
    print "</PRE>";
    print p("... update completed.");
}




sub MainMenu() {
    print h1("Despot -- main menu");
    print table({-width=>"100%"},
                Tr(td(h3("What would you like to do?")) .
                   td({-align=>"right"}, a({-href=>"help.html"},
                                           "Introduction to Despot"))));

    my @list = ();
    push(@list, li(MyForm("ViewAccount") .
                   submit("View info about your account") .end_form()));
    push(@list, li(MyForm("ChangePassword") .
                   submit("Change your password") . end_form()));
    push(@list, li(MyForm("ListPartitions") .
                   submit("List all the partitions") .end_form()));
#     my $query = Query("select partitionid,partitions.name,repositories.name,repositories.id from members,partitions,repositories where userid=$loginid and class != 'Member' and partitions.id=members.partitionid and repositories.id=partitions.repositoryid");
#     my @row;
#     while (@row = $query->fetchrow()) {
#         my ($partid,$partname,$repname,$repid) = (@row);
#         my $title = "Edit partition '$partname' ($repname)";
#         param("partitionid", $partid);
#         push(@list,
#              li(MyForm("EditPartition") . submit($title) .
#                 hidden(-name=>"partitionid") . end_form()));
#     }
    if ($candespot) {
        param("_despot", !$despot);
        my $str = $despot ? "Disable" : "Enable";
        push(@list,
             li(MyForm("MainMenu") . submit("$str Despot Powers") .
                end_form()));
        param("_despot", $despot);
        if ($despot) {
            my @l2 = ();
            push(@l2,
                 li(MyForm("ListUsers") . submit("List all users") .
                    end_form()));
            push(@l2,
                 li(MyForm("AddUser") . submit("Add or edit user") .
                    "with email<nobr> " .
                    textfield(-name=>"email", -size=>50) . "</nobr>" .
                    end_form()));
            my $query = Query("select id,name from repositories order by id");
            my @values = ();
            my %labels;
            while (my @row = $query->fetchrow()) {
                my $v = $row[0];
                push(@values, $v);
                $labels{$v} = $row[1];
            }
            my $radio = popup_menu(-name=>"repid",
                                   -values=>\@values,
                                   -default=>$values[0],
                                   -labels=>\%labels);
            push(@l2,
                 li(MyForm("AddPartition") . submit("Create or edit partition")
                    . " named<nobr> " .
                    textfield(-name=>"partition", -size=>24) . "</nobr>" .
                    "</nobr> in <nobr>repository " . $radio .
                    end_form()));
            push(@list, "Despot commands:" . ul(\@l2));
        }
    }
        

    print ul(\@list);

    if ($neednewpassword) {
        print "<font color=red>Your account has been frozen.  To make it usable, you must change your password.</font>";
    }

    $skiptrailer = 1;
}


sub AddUser() {
    EnsureDespot();
    if ($F::email eq "") {
        Punt("You must enter an email address.");
    }
    my $email = $F::email;
    my $query;
    my @row;
    if ($email !~ /^[^@, ]*@[^@, ]*\.[^@, ]*$/) {
        Punt("Email addresses must contain exactly one '\@', and at least one '.' after the \@, and may not contain any commas or spaces.");
    }

    my $q = SqlQuote($email);
    $query = Query("select count(*) from users where email='$q'");
    @row = $query->fetchrow();

    if ($row[0] < 1) {
        my $p = "";
        my $realname = "";
        my $plain = pickrandompassword();
        $p = cryptit($plain);
        $feedback = "'" . tt($plain) . "'";
        $mailwords = "of '$plain'";
        $realname = "";
        $p = $db->quote($p);
        $realname = $db->quote($realname);
        Query("insert into users (email,passwd,neednewpassword,realname) values ('$q',$p,'Yes',$realname)");
        print p("New account created.  Password initialized to $feedback; " .
                "please " .
                a({href=>"mailto:$email?subject=Change your mozilla.org password&body=Your new mozilla.org account has been created.  It initially has a%0apassword $mailwords.  Please go to http://cvs-mirror.mozilla.org/webtools/despot/despot.cgi%0aand change your password as soon as possible.  You won't actually be%0aable to use it for anything until you do."},
                  "send mail") .
                " and have the user change the password!");
        print hr();
    }
    EditUser();
}


sub EditUser() {
    EnsureDespot();
    print h1("Edit a user");
    my $q = SqlQuote($F::email);
    my $query = Query("select * from users where email='$q'");
    my @row;
    @row = $query->fetchrow();
    my $query2 = Query("show columns from users");
    my @list;
    my @desc;
    for (my $i=0 ; $i<@row ; $i++) {
        @desc = $query2->fetchrow();
        my $line = th({-align=>"right"}, "$desc[0]:" .
                      hidden("orig_$desc[0]", $row[$i]));
        if ($desc[0] ne ($query->name)[$i]) {
            die "show columns in different order than select???";
        }
        $_ = $desc[1];
        if (/^varchar/ || /int\([0-9]*\)$/) {
            $line .= td(textfield(-name=>($query->name)[$i],
                                  -default=>$row[$i],
                                  -size=>50,
                                  -override=>1));
        } elsif (/^enum/) {
            s/^enum\(//;
            s/\)$//;
            @values = split(/,/);
            my $opts = "";
            for (my $j=0 ; $j<@values ; $j++) {
                $values[$j] =~ s/^\'//;
                $values[$j] =~ s/\'$//;
            }
            $line .= td(radio_group(-name=>$desc[0], -values=>\@values,
                                    -default=>$row[$i]));
        }

        push(@list,Tr($line));
    }
    print MyForm("ChangeUser");
    print table(@list);
    print submit("Save changes");
    print end_form();
    print MyForm("GeneratePassword") . hidden(-name=>"email");
    print submit("Generate a new random password for this user");
    print end_form();
    print MyForm("DeleteUser") . hidden(-name=>"email");
    print submit("Delete user");
    print end_form();

}

sub DeleteUser() {
    my $q = SqlQuote($F::email);
    Query("delete from users where email = '$q'");
    Query("insert into syncneeded (needed) values (1)");
    print h1("OK, $F::email is gone.");
    print hr();
    MainMenu();
}

sub ChangeUser() {
    foreach my $field ("email") {
        my $value = param($field);
        if ($value ne param("orig_$field")) {
            my $query = Query("select count(*) from users where $field = '" .
                              SqlQuote($value) . "'");
            my @row;
            @row = $query->fetchrow();
            if ($row[0] > 0) {
                Punt("Can't change $field to '$value'; already used.");
            }
        }
    }


    my $query = Query("show columns from users");
    my @list;
    my @row;
    while (@row = $query->fetchrow()) {
        if (defined $row[0] && (param($row[0]) ne param("orig_$row[0]"))) {
            Query("insert into changes (email,field,oldvalue,newvalue,who) values (" .
                  $db->quote($F::orig_email) . ",'$row[0]'," .
                  $db->quote(param("orig_$row[0]")) . "," .
                  $db->quote(param($row[0])) . ",'" .
                $F::loginname . "')");
        }
        push(@list, "$row[0] = '" . SqlQuote(param($row[0])) . "'");
    }
    $qstr = "update users set " . join(",", @list) . " where email='" .
        SqlQuote($F::orig_email) . "'";
    Query($qstr);
    print h1("OK, record for $F::email has been updated.");
    print hr();
    MainMenu();
    Query("insert into syncneeded (needed) values (1)");
}

sub GeneratePassword {
    my $email = $F::email;
    my $plain = pickrandompassword();
    my $p = cryptit($plain);
    Query("update users set passwd = " . $db->quote($p) . ", neednewpassword='Yes' where email=" .
          $db->quote($email));
    print h1("OK, new password generated.");
    print "$email now has a new password of '" . tt($plain) . "'.  ";
    print "Please " .
        a({href=>"mailto:$email?subject=Change your mozilla.org password&body=Your mozilla.org account now has a password of '$plain'.  Please go to%0ahttp://cvs-mirror.mozilla.org/webtools/despot/despot.cgi and change your password as soon as%0apossible.  You won't actually be able to use your mozilla.org account%0afor anything until you do."},
          "send mail") .
              " to have the user change the password!";
    Query("insert into syncneeded (needed) values (1)");
}
    



sub ListPartitions () {
    print p("If you're wondering what a 'partition' is, " .
            a({-href=>"help.html#partition"}, "read this") . ".");
    ListSomething("partitions", "id", "ListPartitions", "EditPartition", "name",
                  "name,repositoryid,state,description",
                  {"branchid"=>"branches.name,branches.id=partitions.branchid",
                   "repositoryid"=>"repositories.name,repositories.id=partitions.repositoryid"});
}


sub ListUsers() {
    EnsureDespot();

    ListSomething("users", "email", "ListUsers", "EditUser", "email", "email,realname,gila_group,cvs_group,neednewpassword", {});
}


sub ListSomething {
    my ($tablename,$idcolumn,$listprocname,$editprocname,$defaultsortorder,
        $defaultcolumns,$columndefs) = (@_);


    my %columnremap;
    my %columnwhere;

    while (my ($key,$value) = each %$columndefs) {
        my ($name,$where) = split(/,/, $value);
        $columnremap{$key} = $name;
        $columnwhere{$key} = $where;
    }
        

    print h1("List of $tablename");
    my $sortorder = $defaultsortorder;
    if (defined $F::sortorder) {
        $sortorder = $F::sortorder;
    }

    my $query = Query("show columns from $tablename");
    my @allcols = ();
    my @cols = ();
    while (@row = $query->fetchrow()) {
        push(@allcols, $row[0]);
    }

    if (defined @F::showcolumns) {
        @cols = @F::showcolumns;
    }

    if (0 == @cols) {
        @cols = split(/,/, $defaultcolumns);
    }

    my $rtext = th();
    my @list = ();
    my @emaillist = ();
    foreach my $c (@cols) {
        if ($c eq $sortorder) {
            $rtext .= th({-valign=>"top"}, "sorted by<br>$c");
        } else {
            $rtext .= th({-valign=>"top"},
                         MyForm($listprocname) .
                         submit($c) .
                         hidden(-name=>"sortorder",
                                -default=>$c,
                                -override=>1) .
                         end_form());
        }
        if (!defined $columnremap{$c}) {
            $columnremap{$c} = "$tablename.$c";
        }
    }

    push(@list, $rtext);
    my @mungedcols;
    my %usedtables;
    my $wherepart = "";
    foreach my $c (@cols) {
        my $t = $columnremap{$c};
        push(@mungedcols,$t);
        ($t) = split(/\./, $t);
        $usedtables{$t} = 1;
        if (defined $columnwhere{$c}) {
            if ($wherepart eq "") {
                $wherepart = " where ";
            } else {
                $wherepart .= " and ";
            }
            $wherepart .= $columnwhere{$c};
        }
    }
    $query = Query("select $tablename.$idcolumn," . join(",", @mungedcols) . " from " . join(",", keys(%usedtables)) . $wherepart . " order by $columnremap{$sortorder}");
    while (@row = $query->fetchrow()) {
        my $i;
        for ($i=1 ; $i<@row ; $i++) {
            if (!defined $row[$i]) {
                $row[$i] = "";
            }
        }
        my $thisid = shift(@row);
        push(@emaillist, $thisid);
        push(@list, td(MyForm($editprocname) . hidden($idcolumn, $thisid) .
                       submit("Edit") . end_form()) .
             td(\@row));
    }
    print table(Tr(\@list));
    if ($idcolumn eq "email") {
        my $mailtolist = "mailto:" . join(',', @emaillist);
        print p(a({href=>$mailtolist},"Send mail to all users"));
    }
    print hr();
    print MyForm($listprocname);
    print submit("Redisplay with the following columns:") . br();
    print checkbox_group(-name=>"showcolumns",
                         -values=>\@allcols,
                         -default=>\@cols,
                         -linebreak=>'true');
    print hidden(-name=>"sortorder", -default=>$sortorder, -override=>1);
    print end_form();
    

}



sub ViewAccount {
    my $query = Query("select * from users where email='$F::loginname'");
    my @row;
    @row = $query->fetchrow();
    my $query2 = Query("show columns from users");
    my @list;
    my @desc;
    my $userid;
    for (my $i=0 ; $i<@row ; $i++) {
        @desc = $query2->fetchrow();
        my $line = th({-align=>"right"}, "$desc[0]:");
        if ($desc[0] ne ($query->name)[$i]) {
            die "show columns in different order than select???";
        }
        $_ = $desc[1];
        $line .= td($row[$i]);
        push(@list,Tr($line));
    }
    print table(@list);
    $query = Query("select partitions.id,repositories.name,partitions.name,class from members,repositories,partitions where members.userid=$loginid and partitions.id=members.partitionid and repositories.id=partitions.repositoryid order by class");
    while (@row = $query->fetchrow()) {
        my ($partid, $repname,$partname,$class) = (@row);
        param("partitionid", $partid);
        print MyForm("EditPartition") . hidden("partitionid") .
            submit("$class of $partname ($repname)") . end_form();
    }

    if ($despot) {
        print MyForm("EditUser") . hidden("email", $F::loginname) .
            submit("Edit your account") .
                "(Since you're a despot, you can do this)" .                
                    end_form();
    }
    

}
    


sub AddPartition {
    EnsureDespot();
    my $partition = $F::partition;
    if ($partition eq "") {
        Punt("You must enter a partition name.");
    }
    my $repid = $F::repid;
    my $query;
    my @row;

    $query = Query("select id from partitions where repositoryid=$repid and name = '$partition'");

    if (!(@row = $query->fetchrow())) {
        Query("insert into partitions (name,repositoryid,state,branchid) values ('$partition',$repid,'Open',1)");
        print p("New partition created.") . hr();
        @row = Query("select LAST_INSERT_ID()")->fetchrow();
    }

    $F::partitionid = $row[0];
    EditPartition();
}

sub EditPartition() {
    my $partitionid;
    if (defined $F::partitionid) {
        $partitionid = $F::partitionid;
    } else {
        $partitionid = $F::id;
    }
    my $canchange = CanChangePartition($partitionid);
    my $query = Query("select partitions.name,partitions.description,state,repositories.name,repositories.id,branches.name from partitions,repositories,branches where partitions.id = $partitionid and repositories.id = repositoryid and branches.id = branchid");
    @row = $query->fetchrow();

    my ($partname,$partdesc,$state,$repname,$repid,$branchname) = (@row);
    print h1(($canchange ? "Edit" : "View") . " partition -- $partname");
    if (!$canchange) {
        print p(b("You can't change anything here!") .
                " You can look, but you won't be permitted to touch.");
    }

    if ($partname eq "default") {
        print "<font color=red>This is the magic default partition.  It gets consulted on any file that does not match any other partition.</font>";
    }

    my @list;

    push(@list, Tr(th("Repository:") . td($repname)));

    push(@list, Tr(th("Description:") . td(textarea(-name=>"description",
                                                    -default=>$partdesc,
                                                    -rows=>4,
                                                    -columns=>50))));

    push(@list,
         Tr(th(a({-href=>"help.html#state"},"State:")) .
            td(radio_group(-name=>'state',
                           -values=>['Open', 'Restricted', 'Closed'],
                           -default=>$state,
                           -linebreak=>'false'))));

    push(@list,
         Tr(th(a({-href=>"help.html#branch"}, "Branch:")),
            td(textfield(-name=>'branchname',
                         -default=>$branchname,
                         -size=>30,
                         -override=>1))));

    $query = Query("select pattern from files where partitionid=$partitionid order by pattern");
    push(@list, CreateListRow("files", $query));
    foreach my $class ("Owner", "Peer", "Member") {
        $query = Query("select users.email from members,users where members.partitionid = $partitionid and members.class = '$class' and users.id = members.userid order by users.email");
        push(@list, CreateListRow($class, $query));
    }
                                                   
         
    param("partitionid", $partitionid);
    param("repid", $repid);
    param("repname", $repname);
    my $h = hidden(-name=>"partitionid") .
        hidden(-name=>"repid") .
            hidden(-name=>"repname");

    print MyForm("ChangePartition");
    print table(@list);
    if ($canchange) {
        print submit("Save changes");
        print $h;
        print end_form();
        print MyForm("DeletePartition");
        print submit("Delete partition");
        print $h;
    }
    print end_form();
}

sub ChangePartition {
    my $query;
    my @row;

    EnsureCanChangePartition($F::partitionid);

    Query("lock tables partitions write,branches write,files write,members write,users read");

    # Sanity checking first...

    my @files = split(/\n/, $F::files);

    $query = Query("select files.pattern,partitions.name from files,partitions where files.partitionid != $F::partitionid and partitions.id=files.partitionid and partitions.repositoryid=$F::repid");
    while (@row = $query->fetchrow()) {
        my $f1 = $row[0];
        foreach my $f2 (@files) {
            $f2 = trim($f2);
            if ($f2 eq "") {
                next;
            }
            if (FileMatches($f1, $f2) || FileMatches($f2, $f1)) {
                Punt("File rule $f2 overlaps with existing rule in partition $row[1]");
            }
        }
    }

    my %idhash;
    foreach my $class ("Owner", "Peer", "Member") {
        my @names = split(/\n/, param($class));
        foreach my $n (@names) {
            $n = trim($n);
            if ($n eq "") {
                next;
            }
            $query = Query("select id,${F::repname}_group from users where email = " . $db->quote($n));
            if (!(@row = $query->fetchrow())) {
                Punt("$n is not an email address in the database.");
            }
            my ($userid,$group) = (@row);
            if (exists $idhash{$n}) {
                Punt("$n seems to be mentioned more than once.  A given user can only have one class.");
            }
            $idhash{$n} = $userid;
            if ($group eq "None") {
                Punt("$n is not allowed to use the $F::repname repository at all, so it doesn't make sense to put this user into this partition.");
            }
        }
    }

                



    # And now actually update things.

    $query = Query("select id from branches where name = " .
                   $db->quote($F::branchname));
    if (!(@row = $query->fetchrow())) {
        Query("insert into branches (name) values (" .
              $db->quote($F::branchname) . ")");
        $query = Query("select LAST_INSERT_ID()");
        @row = $query->fetchrow();
    }
    my $branchid = $row[0];
    Query("update partitions set description=" . $db->quote($F::description) . ", branchid=$branchid, state='$F::state' where id=$F::partitionid");

    Query("delete from files where partitionid=$F::partitionid");
    foreach my $f2 (@files) {
        $f2 = trim($f2);
        if ($f2 eq "") {
            next;
        }
        Query("insert into files (partitionid,pattern) values ($F::partitionid," . $db->quote($f2) . ")");
    }

    Query("delete from members where partitionid=$F::partitionid");
    foreach my $class ("Owner", "Peer", "Member") {
        my @names = split(/\n/, param($class));
        foreach my $n (@names) {
            $n = trim($n);
            if ($n eq "") {
                next;
            }
            Query("insert into members(userid,partitionid,class) values ($idhash{$n},$F::partitionid,'$class')");
        }
    }

    print h1("OK, the partition has been updated.");
    print hr();
    Query("unlock tables");
    MainMenu();

    Query("insert into syncneeded (needed) values (1)");
}


sub DeletePartition() {
    EnsureCanChangePartition($F::partitionid);

    Query("delete from partitions where id = '$F::partitionid'");
    Query("delete from files where partitionid = '$F::partitionid'");
    Query("delete from members where partitionid = '$F::partitionid'");
    Query("insert into syncneeded (needed) values (1)");
    print h1("OK, the partition is gone.");
    print hr();
    MainMenu();
}

sub FileMatches {
    my ($pattern, $name) = (@_);
    my $regexp = $pattern;
    if ($pattern =~ /\%$/) {
        $regexp =~ s:\%$:[^/]*:;
    } elsif ($pattern =~ /\*$/) {
        $regexp =~ s:\*$:.*:;
    }
    if ($name =~ /$pattern/) {
        return 1;
    }
    return 0;
}


sub CreateListRow {
    my ($title, $query) = (@_);
    my $result = "";
    my @row;
    while (my @row = $query->fetchrow()) {
        my $v = $row[0];
        $result .= $v . "\n";
    }
    return Tr(th(a({-href=>"help.html#$title"}, "$title:")) .
              td(textarea(-name=>$title,
                          -default=>$result,
                          -rows=>10,
                          -columns=>50)));
}



sub ChangePassword {
    print h1("Change your mozilla.org password.");
    $F::loginpassword = "";
    print start_form($POSTTYPE);
    print hidden("loginname", $F::loginname);
    print hidden(-name=>"command",
                 -default=>"SetNewPassword",
                 -override=>1);
    print table(Tr(th({-align=>"right"}, "Old password:"),
                   td(password_field(-name=>"loginpassword", -size=>20,
                                     -override=>1))),
                Tr(th({-align=>"right"}, "New password:"),
                   td(password_field(-name=>"newpassword1", -size=>20))),
                Tr(th({-align=>"right"}, "Retype new password:"),
                   td(password_field(-name=>"newpassword2", -size=>20))));
    print submit("Change password");
    print end_form();
}


sub SetNewPassword {
    if ($F::newpassword1 ne $F::newpassword2) {
        Punt("New passwords didn't match.");
    }
    if ($F::newpassword1 eq $F::loginpassword) {
        Punt("Your new password isn't any different than your old one.");
    }
    my $z1;
    my $p = "";
    my $salt = "";
    if ($F::loginname =~ /\@netscape.com$/) {
        my $userid = $F::loginname;
        $userid =~ s/@.*$//;
        ($z1, $p) = split(/:/, `/bin/ypmatch $userid passwd`);
        $salt = substr($p, 0, 2);
    }
    my $pass = cryptit($F::newpassword1, $salt);
    if ($pass eq $p) {
        Punt("Your new password seems to be the same as your LDAP password that is used in the rest of Netscape.  Please pick a different password.");
    }

    my $qpass = $db->quote($pass);
    Query("update users set passwd = $qpass, neednewpassword = 'No' where email='$F::loginname'");
    print h1("Password has been updated.");
    Query("insert into syncneeded (needed) values (1)");
    if ($despot) {
        param("loginpassword", $F::newpassword1);
        print hr();
        MainMenu();
    }
}





sub MyForm {
    my ($command) = @_;
    my $result = start_form($POSTTYPE) . hidden("loginname", $F::loginname) .
        hidden("_despot") .
        hidden("loginpassword", $F::loginpassword) .
            hidden(-name=>"command", -value=>$command, -override=>1);
    return $result;
}

sub Punt {
    my ($header) = @_;
    print h1($header);
    print p("Please hit " . b("back") . " and try again.");
    exit;
}


sub EnsureDespot {
    if (!$despot) {
        Punt("You're not a despot.  You can't do this.");
    }
}


sub EnsureCanChangePartition {
    my ($id) = (@_);
    if (!CanChangePartition($id)) {
        Punt("You must be an Owner or Peer of the partition to do this.");
    }
}


sub CanChangePartition {
    my ($id) = (@_);
    if ($despot) {
        return 1;
    }
    my $query = Query("select class from members where userid=$loginid and partitionid=$id");
    my @row;
    if (@row = $query->fetchrow()) {
        if ($row[0] ne "Member") {
            return 1;
        }
    }
    return 0;
}


sub pickrandompassword {
    my $sc = "abcdefghijklmnopqrstuvwxyz";
    my $result = "";
    for (my $i=0 ; $i<8 ; $i++) {
        $result .= substr($sc, int (rand () * 100000) % (length ($sc) + 1), 1);
    }
    return $result;
}