#!/usr/bin/perl

use strict;
use CGI;
use JSON;

use Opals::Context;
use Opals::Template qw(
    tmpl_preference
);
use Opals::User qw(
    user_accessAllowed
);

use Opals::Mail qw(
    mail_send
);
my $dbh = Opals::Context->dbh();
my $pref    = tmpl_preference($dbh);

my $request=getRequest();
my $cgi = CGI->new;

my $referer=$ENV{'HTTP_REFERER'};
my $host=$ENV{'SERVER_NAME'};

my $rs={status=>-1};
if($referer=~ m/$host/ && user_accessAllowed($dbh,$cgi,$ENV{'SCRIPT_NAME'})){
    mail_send($pref, $request->{"email"}, $request->{"subject"}, $request->{"content"});
    $rs={status=>1};
}

print "Content-type: text/plain\n\n";

print   to_json($rs);


#======================================================================

sub getRequest{
  my $request={};
  if ($ENV{'REQUEST_METHOD'} eq "POST") {
        my $json ="";
        while (<STDIN>) {
            $json .= $_;
        }
        $request = decode_json($json);
   }
   return $request;
}