#!/usr/bin/perl -Tw
############################################################
## Written and copyright 2002 by 
## Jacqueline D. Hamilton (kira@cgi101.com)
##
## This code is excerpted from "CGI Programming 201"
## (http://www.cgi101.com/advanced)
##
## You may use this code on your own website, however
## you may not publish or sell any copy or derivative work
## without permission of the author.
#############################################################
use strict;
use lib '.';
use MyBoard;

# declare variables
my($forum, $sth, $rv, $id, $name, $desc);

# untaint the query string
if ($ENV{QUERY_STRING} =~ /^(\d+)$/) {
    $forum = $1;
} else {
    &dienice("$ENV{QUERY_STRING} isn't a valid forum number.");
}

# get the forum info
$sth = $dbh->prepare("select * from forums where id=?");
$rv = $sth->execute($forum);
my($f) = $sth->fetchrow_hashref;
&do_header("New Topic in $f->{name}");

print <<EndForm;
A valid e-mail address is required to post a message here.<p>

<form action="postmsg.cgi" method="POST">
<input type="hidden" name="forum" value="$forum">
<pre>
Your Name:     <input type="text" name="name" size=40>
Email Address: <input type="text" name="email" size=40>
Subject:       <input type="text" name="subject" size=40>
</pre>
Enter your message below. Do not use HTML tags.<p> 
<textarea name="message" rows=10 cols=78 wrap="HARD"></textarea>
<p>
<input type="submit" value="Post Message">
<input type="reset" value="Erase">
</form>

EndForm

&do_footer;