my @files = glob "$ENV{'DOCUMENT_ROOT'}/data/text/*.txt";
my @menu_files = map m{([^/]+)\.txt}, @files;
Encode::from_to($_, 'ISO-8859-7', 'utf8') for @menu_files;

print header( -charset=>'utf8' );
my $article = param('select') || "Αρχική Σελίδα!";


if ( param('select') )  {  #If user selected an item from the drop down menu

   unless( grep  /^\Q$article\E$/, @menu_files )  #Unless user selection doesn't match one of the valid filenames within @menu_files
   {
      if( param('select') =~ /\0/ )
      {
         $article = "*Null Byte Injection* attempted & logged!";
         print br() x 2, h1( {class=>'big'}, $article );
      }
      if( param('select') =~ /\.\.\// )
      {  
         $article = "*Backwards Directory Traversal* attempted & logged!";
         print br() x 2, h1( {class=>'big'}, $article );
      }

      $select = $db->prepare( "UPDATE guestlog SET article=?, date=?, counter=counter+1 WHERE host=?" );
      $select->execute( $article, $date, $host );
      
      exit 0;
   }

   Encode::from_to($article, 'utf8', 'ISO-8859-7');  #Convert user selected filename to greek-iso so it can be opened

   open FILE, "<$ENV{'DOCUMENT_ROOT'}/data/text/$article.txt" or die $!;
      local $/;      
      $data = <FILE>;
   close FILE;
   
   Encode::from_to($article, 'ISO-8859-7', 'utf8');  #Convert user selected filename back to utf8 before inserting into db 

   $select = $db->prepare( "UPDATE guestlog SET article=?, date=?, counter=counter+1 WHERE host=?" );
   $select->execute( $article, $date, $host );
}
else {
   $select = $db->prepare( "SELECT host FROM guestlog WHERE host=?" );
   $select->execute( $host );

   if ($select->rows)
   {
      $select = $db->prepare( "SELECT host, DATE_FORMAT(date, '%a %d %b, %h:%i') AS date, counter, article FROM guestlog WHERE host=?" );
      $select->execute( $host );
      $row = $select->fetchrow_hashref;

      $data = "&#922;&#945;&#955;&#974;&#962; &#942;&#955;&#952;&#949;&#962; $host! &#935;&#945;&#943;&#961;&#959;&#956;&#945;&#953; &#960;&#959;&#965; &#946;&#961;&#943;&#963;&#954;&#949;&#953;&#962; &#964;&#951;&#957; &#963;&#949;&#955;&#943;&#948;&#945; &#949;&#957;&#948;&#953;&#945;&#966;&#941;&#961;&#959;&#965;&#963;&#945;.
               &#932;&#949;&#955;&#949;&#965;&#964;&#945;&#943;&#945; &#966;&#959;&#961;&#940; &#942;&#961;&#952;&#949;&#962; &#949;&#948;&#974; &#969;&#962; $row->{host} &#963;&#964;&#953;&#962; $row->{date} !
               &#928;&#961;&#959;&#951;&#947;&#959;&#973;&#956;&#949;&#957;&#959;&#962; &#945;&#961;&#953;&#952;&#956;&#974;&#957; &#949;&#960;&#953;&#963;&#954;&#941;&#968;&#949;&#969;&#957; => $row->{counter}
               &#932;&#949;&#955;&#949;&#965;&#964;&#945;&#943;&#945; &#949;&#943;&#948;&#949;&#962; &#964;&#959; &#954;&#949;&#943;&#956;&#949;&#957;&#959; [ $row->{article} ]
               &#928;&#959;&#953;&#972; &#954;&#949;&#943;&#956;&#949;&#957;&#959; &#952;&#945; &#956;&#949;&#955;&#949;&#964;&#942;&#963;&#949;&#953;&#962; &#945;&#965;&#964;&#942;&#957; &#964;&#951;&#957; &#966;&#959;&#961;&#940; !?";

      $select = $db->prepare( "UPDATE guestlog SET date=?, counter=counter+1 WHERE host=?" );
      $select->execute( $date, $host );
    }
    else
    {
      if ($host eq "Administrator") {
         $data = "&#915;&#949;&#953;&#940; &#963;&#959;&#965; &#925;&#953;&#954;&#972;&#955;&#945;! &#928;&#974;&#962; &#960;&#940;&#957;&#949; &#964;&#945; &#954;&#941;&#966;&#953;&#945;? ;-)";
      }
      else {
         $data = "&#915;&#949;&#953;&#940; &#963;&#959;&#965; $host!
                  &#904;&#961;&#967;&#949;&#963;&#945;&#953; &#947;&#953;&#945; 1&#951; &#966;&#959;&#961;&#940; &#949;&#948;&#974; !!
                  &#917;&#955;&#960;&#943;&#950;&#969; &#957;&#945; &#946;&#961;&#949;&#943;&#962; &#964;&#945; &#954;&#949;&#943;&#956;&#949;&#957;&#945; &#949;&#957;&#948;&#953;&#945;&#966;&#941;&#961;&#959;&#957;&#964;&#945; :-)";
      }

      unless ($host eq "Administrator") {
         $select = $db->prepare( "INSERT INTO guestlog (host, date, article, counter) VALUES (?, ?, ?, ?)" );
         $select->execute( $host, $date, $article, 1 );
      }
    }
}

for ($data) {  #Replace special chars like single & double quotes to its literally values
   s/\n/\\n/g;
   s/'/\\'/g;
   s/"/\"/g;
   tr/\cM//d;
}