#!/usr/bin/perl

$no_template_name = "home"; # template to be displayed if none specified - html will be added to the name
$no_personalid = "1000";     # affiliate ID used if none specified
$template_directory = "/home/gap/public_html/webhosting"; # full path to template pages

#### DO NOT EDIT BELOW HERE #####


if ($ENV{'QUERY_STRING'} ne '') {
   ($template_name, $personalid) = split(/-/, $ENV{'QUERY_STRING'}); # split query string up

    $personalid =~ s/passwd/ /gi;		            # remove attempts to send/display passwd file
    $personalid =~ s/sendmail/ /gi;                   # remove attempts to invoke sendmail
    $personalid =~ s/<!--(.|\n)*-->//g;  	            # remove attempts to display server-side-includes
    $template_name =~ s/passwd/ /gi;	            # remove attempts to send/display passwd file
    $template_name =~ s/sendmail/ /gi;                # remove attempts to invoke sendmail
    $template_name =~ s/<!--(.|\n)*-->//g;  	      # remove attempts to display server-side-includes

}
else {
      $template_name = $no_template_name;             # use default template if none specified
      $personalid = $no_personalid;                   # use default ID if none specified
}


## enter the name of the file to open below

open (TEMPLATE, "<$template_directory/$template_name.html"); # html added to template name to foil hackers
@lines=<TEMPLATE>;
close (TEMPLATE);
$buffer=$ENV{'QUERY_STRING'};
print "Content-type: text/html\n\n";
## change the string below (current is PERSONALID) to string to be
## replaced.
foreach $temp (@lines)
{
  $temp =~ s/\[PERSONALID\]/$personalid/;
  print $temp;
}
exit;