#!/usr/bin/python
import cgitb; cgitb.enable()
import cgi
import os
import subprocess
import sys

# Target list name
ListName = "blaag"

print "Content-type: text/html"
print 
print "<title>Into the fray...</title>"
print "<h2>Invite your friends!</h2>"

form = cgi.FieldStorage()

#print "Environment:<br>";
#for param in os.environ.keys():
#   print "<b>%s</b>: %s<br>" % (param,os.environ[param])

#print "number of form elements: " + str(len(form)) + "<br><br>"

# References:
# http://www.tutorialspoint.com/python/python_cgi_programming.htm
# http://httpd.apache.org/docs/2.0/howto/auth.html

from string import *

rfc822_specials = '()<>@,;:\\"[]'

def isAddressValid(addr):
    '''Validate an email address'''
    # First we validate the name portion (name@domain)
    c = 0
    while c < len(addr):
        if addr[c] == '"' and (not c or addr[c - 1] == '.' or addr[c - 1] == '"'):
            c = c + 1
            while c < len(addr):
                if addr[c] == '"': break
                if addr[c] == '\\' and addr[c + 1] == ' ':
                    c = c + 2
                    continue
                if ord(addr[c]) < 32 or ord(addr[c]) >= 127: return 0
                c = c + 1
            else: return 0
            if addr[c] == '@': break
            if addr[c] != '.': return 0
            c = c + 1
            continue
        if addr[c] == '@': break
        if ord(addr[c]) <= 32 or ord(addr[c]) >= 127: return 0
        if addr[c] in rfc822_specials: return 0
        c = c + 1
    if not c or addr[c - 1] == '.': return 0

    # Next we validate the domain portion (name@domain)
    domain = c = c + 1
    if domain >= len(addr): return 0
    count = 0
    while c < len(addr):
        if addr[c] == '.':
            if c == domain or addr[c - 1] == '.': return 0
            count = count + 1
        if ord(addr[c]) <= 32 or ord(addr[c]) >= 127: return 0
        if addr[c] in rfc822_specials: return 0
        c = c + 1

    return count >= 1


# GET method
if os.environ['REQUEST_METHOD'] == "GET":
    print """
    <table width=800>
    <tr><td>
    Use this form to invite your friends to the list '""" + ListName + """'. A standard mailman confirmation will be sent
    to the specified address.
    <br><br>
    <table>
    <form action="/addmember/index.py" method="POST">
    <tr><td>Email Address:</td><td><input type="text" name="address"></td></tr>
    <tr><td>Verify Email Address:</td><td><input type="text" name="address_verify"/></td></tr>
    <tr><td><input type="submit" value="Submit" /></td></tr>
    </table>
    </form>
    <br>
    NOTE: Once subscribed, users may unsubscribe using the standard mailman techniques, described
    in the mailman welcome email.
    </td></tr></table>
"""

# POST method
if os.environ['REQUEST_METHOD'] == "POST":
#    print "Got form items:<br>"
#    for k in form.keys():
#        print "key %s with value %s<br>" % (k, form.getvalue(k))

    # Check that the email address was typed correctly
    if form.getvalue('address') == form.getvalue('address_verify'):
        invitee = form.getvalue('address')
        pass
    else:
        print """
        The supplied addresses do not match, type better next time!
        <br>
        <a href='index.py'>Ok, I'll try my best</a>
        """
        sys.exit()

    # Verify that the input is a valid email address
    if isAddressValid(invitee):
        pass
    else:
        print """
        The supplied input is not a valid email address, stop hacking!
        <br>
        <a href='index.py'>Ok, I will stop hacking</a>
        """
        sys.exit()

    # Fire off new_add_members, passing address as stdin
    # we're emulating something like: echo "ADDRESS" | new_add_members -r - LISTNAME
    proc = subprocess.Popen(
        [
            'sudo',
            '/usr/sbin/new_add_members',
            '-r',
            '-',
            ListName,
        ],
        stdin=subprocess.PIPE,
        stdout=subprocess.PIPE,
        stderr=subprocess.PIPE,
    )
    # the value of 'address' is sent via stdin
    stdout,stderr = proc.communicate(form.getvalue('address'))
    print stdout
    if stderr:
        print stderr
    print "<br><br><a href='index.py'>Invite another friend!</a>"