www/cgi-bin/cast-vote.pl - steve - Git at Google

 #!/usr/bin/perl -T
 #####
 # Licensed to the Apache Software Foundation (ASF) under one or more
 # contributor license agreements.  See the NOTICE file distributed with
 # this work for additional information regarding copyright ownership.
 # The ASF licenses this file to You under the Apache License, Version 2.0
 # (the "License"); you may not use this file except in compliance with
 # the License.  You may obtain a copy of the License at
 #
 #     http://www.apache.org/licenses/LICENSE-2.0
 #
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #####

 # cast-vote.pl - REST-compliant CGI script that invokes the vote tool
 #                on validated input.
 #                Assumes the url-path for this script is /cast.

 use warnings;
 use CGI;
 use CGI::Carp qw/fatalsToBrowser/;
 use Digest::MD5;
 use URI::Escape;

 BEGIN {
     unshift @INC, "/home/voter/bin";
 }
 use steve;
 use strict;

 my $VOTE_TOOL = "/home/voter/bin/vote";
 my $VOTE_TMPDIR = "/home/voter/tmp";
 my $VOTE_ISSUEDIR = "/home/voter/issues";

 $ENV{PATH_INFO} =~ m!^/(\w+)-(\d+-\w+)/([0-9a-f]{32})$!
     or die "Malformed URL\n";
 my ($group, $issue, $hash) = ($1, $2, $3);

 my $voter = fetch_voter($group, $issue, $hash)
     or die "Invalid URL\n";

 my ($type, @valid_vote) = fetch_type_info($group, $issue)
     or die "Can't identify issue type!\n";

 my $issue_name = "$group-$issue";

 my $q = CGI->new;

 my $interactive = $q->param('interactive') eq "no" ? 0 : 1;

 if ($ENV{REQUEST_METHOD} eq "GET" or $ENV{REQUEST_METHOD} eq "HEAD") {

     open my $fh, "$VOTE_ISSUEDIR/$group/$issue/issue"
         or die "Can't open issue: $!\n";
     read $fh, my $issue_content, -s $fh;
     close $fh;

     $issue_content = $q->escapeHTML($issue_content);
     $issue_content =~ s#\b(https?://\S+)#"<a href=\"/redirect?uri=" . uri_escape_utf8($1) . "\">$1</a>"#ge;
     $issue_content = join "\n", randomize split /\n/, $issue_content;
     $issue_content .= "\n"; # split knocks off the last newline

     open $fh, "$VOTE_ISSUEDIR/$group/$issue/monitors"
         or die "Can't open monitor file: $!\n";
     read $fh, my $monitors, -s $fh;
     close $fh;
     chomp $monitors;

     my $trailer = <<EOT;
 <p>
 If for some reason you are unable to fill out the form and submit it,
 then you can vote by proxy: simply send this URL to some Apache committer
 that you trust, preferably with instructions on how you wish them to
 place your vote.  <strong>DO NOT DISCLOSE THIS URL TO ANYONE ELSE, AS THEY
 WILL BE ABLE TO ACT AS YOUR PROXY AND CAST VOTES ON YOUR BEHALF IF
 YOU DO.</strong>
 </p>
 <p>
 For verification purposes, you will be receiving an e-mail notification
 each time your voting key is used.  Repeat votes will be considered
 a complete replacement of your prior vote.  Your vote will be
 recorded in a tally file and sent to the vote monitors along with
 a different unique key, minimizing the chance that the contents of
 your vote will be accidentally seen by someone else while associated
 to you.  That is why the verification e-mail will only state that you
 have voted, rather than including how you voted.
 </p>
 <p>
 If you have any problems or questions, send an email to the vote monitors
 for this issue: <a href="mailto:$monitors">$monitors</a>.
 </p>
 EOT

     my $output = "Content-Type: text/html; charset=utf-8\n\n";

     if ($type eq "yna") {
         $output .= yna_form($voter, $issue_name, $issue_content, $trailer);
     }
     elsif ($type =~ /^stv([1-9])$/ && $interactive) {
         $output .= stv_form_interactive($1, $voter, $issue_name, $issue_content, $trailer);
     }
     elsif ($type =~ /^stv([1-9])$/) {
         $output .= stv_form($1, $voter, $issue_name, $issue_content, $trailer);
     }
     elsif ($type =~ /^select([1-9])$/) {
         $output .= select_form($1, $voter, $issue_name, $issue_content, $trailer);
     }

     print $output;
     exit;

 }
 elsif ($ENV{REQUEST_METHOD} eq "POST") {

     my $vote = $q->param("vote");
     die "Vote undefined\n" unless defined $vote;
     $vote =~ tr/A-Z/a-z/;
     $vote =~ tr/"'//d;
     $vote = $q->escapeHTML($vote); # better safe than sorry

     if ($type eq "yna") {
         grep $_ eq $vote, @valid_vote or die "Invalid yna vote: $vote\n";
     }
     elsif ($type =~ /([1-9])$/) {
         my $selection = $1;

         if ($type =~ /^select/) {
             length($vote) <= $selection
                 or die "Too many candidates: only select up to $selection labels: $vote\n";
         }

         my $char_class = "[" . join("",@valid_vote) . "]";
         $vote =~ /^$char_class+$/
             or die "$type vote out of range (no such candidate label): $vote\n";

         my %uniq;
         @uniq{split //, $vote} = ();
         length($vote) == keys %uniq
             or die "Duplicate candidate labels in $type vote: $vote\n";
     }

     # vote is valid, time to execute the program...

     umask 077;
     local %ENV;

     my $tmpfile = "$VOTE_TMPDIR/$issue.$$";
     my $cmd = "$VOTE_TOOL > $tmpfile 2>&1";
     open my $vote_tool, "| $cmd"
         or die "Can't popen '$cmd': $!\n";

     local $SIG{TERM} = local $SIG{INT} = local $SIG{HUP} = local $SIG{PIPE}
         = sub {
             unlink $tmpfile;
             die "SIG$_[0] caught\n";
         };

     print $vote_tool "$issue_name\n";
     print $vote_tool "$hash\n";
     print $vote_tool "$vote\n";

     close $vote_tool;
     my $vote_status = $?;
     my $vote_log;

     my $http_status = $vote_status == 0 ? 200 : 500;

     if (open my $fh, $tmpfile) {
         read $fh, $vote_log, -s $fh;
         close $fh;
         unlink $tmpfile;
     }
     else {
         unlink $tmpfile;
         die "Couldn't open $tmpfile: vote status=$vote_status: $!\n";
     }

     my $comment = $vote_status == 0
         ? "Congratulations, it appears your vote was successfully cast.<br />"
             : qq(<a href="/cast/$issue_name/$hash">Please try again</a>,)
                 . " it appears there was a problem with your vote.<br />";

     my $other_issues = eval { other_issues($issue_name, $voter) };
     die "Can't list other issues: vote status=$vote_status: $@" if $@;

     print <<EoVOTE;
 Status: $http_status
 Content-Type: text/html; charset=utf-8

 <html>
 <head>
 <title>Vote Cast on $issue_name</title>
 <script type='text/javascript'>
   function unhide(id) {
     document.getElementById(id).style.display = 'inline';
   }
 </script>
 <link rel="stylesheet" type="text/css" href="/cast-style.css">
 </head>
 <body>
 <h1>Vote results for &lt;$voter&gt; on $issue_name...</h1>
 <h2>Vote Tool Exit Status: $vote_status (0 means success!)</h2>
 $comment
 <a href="javascript:unhide('details');">Details</a><br />
 <textarea id='details' style='display: none' readonly>$vote_log</textarea>
 $other_issues
 </body>
 </html>
 EoVOTE

     exit;

 }
 else {
     die "Unsupported method $ENV{REQUEST_METHOD}\n";
 }

 sub fetch_type_info {
     my ($group, $issue) = @_;
     open my $fh, "$VOTE_ISSUEDIR/$group/$issue/vote_type" or return;
     chomp(my @data = <$fh>);
     return @data;
 }

 sub fetch_voter {
     my ($group, $issue, $hash) = @_;
     my $issue_id = eval { filestuff("$VOTE_ISSUEDIR/$group/$issue/issue") }
         or return;
     for my $voter (eval { get_group("$VOTE_ISSUEDIR/$group/voters") }) {
         return $voter if get_hash_of("$issue_id:$voter") eq $hash;
     }
     return;
 }

 sub yna_form {
     my ($voter, $issue_name, $issue_content, $trailer) = @_;
     my $other_issues = other_issues($issue_name, $voter);

     return <<EoYNA;
 <html>
 <head>
 <title>Vote on $issue_name</title>
 <script type='text/javascript'>
   function unhide(id) {
     document.getElementById(id).style.display = 'inline';
   }
 </script>
 <link rel="stylesheet" type="text/css" href="/cast-style.css">
 </head>
 <body>
 <h1>Cast your vote &lt;$voter&gt; on $issue_name:</h1>
 <center>
 <div id="issue"><pre>$issue_content</pre></div>
 </center>

 <hr />

 <p>
 To cast your vote, select <strong>yes</strong>, <strong>no</strong>,
 or <strong>abstain</strong> from the form below and click
 on the "Submit" button.
 </p>
 <center>
 <form method="POST">
    <div style="text-align:left; width: 10em">
       <input type="radio" name="vote" value="yes"> <strong>yes</strong><br />
       <input type="radio" name="vote" value="no"> <strong>no</strong><br />
       <input type="radio" name="vote" value="abstain"> <strong>abstain</strong><br />
       <input type="submit" name="submit" value="Submit">
    </div>
 </form>
 </center>
 <a href="javascript:unhide('details');">Details</a><br />
 <div id='details' style='display: none'>
 $trailer
 </div>
 $other_issues
 </body>
 </html>
 EoYNA
 }

 sub stv_form {
     my ($num, $voter, $issue_name, $issue_content, $trailer) = @_;
     my $other_issues = other_issues($issue_name, $voter);

     return <<EoSTV;
 <html>
 <head>
 <title>Vote on $issue_name</title>
 <script type='text/javascript'>
   function unhide(id) {
     document.getElementById(id).style.display = 'inline';
   }
 </script>
 <link rel="stylesheet" type="text/css" href="/cast-style.css">
 </head>
 <body>

 <h1>Cast your vote &lt;$voter&gt; on $issue_name:</h1>
 <center>
 <div id="issue"><pre>$issue_content</pre></div>
 </center>
 <hr />
 <p>
     Looking for the interactive version? <a href="?">Click here!</a>
 </p>
 <p>
 To cast your vote, fill in the form entry for your vote below with a
 single word containing the concatenated <b>labels</b> of the candidates in the
 order that you wish them to be selected.  In other words, if you want to
 vote for the candidates labeled [x], [s], and [p], in that order, then
 your vote should be "xsp".
 </p>
 <p>
 Then click on the "Submit" button to ultimately cast your vote.
 </p>
 <center>
 <form method="POST">
       <strong>Vote:</strong> <input type="text" name="vote"><br />
       <input type="submit" name="submit" value="Submit">
 </form>
 </center>
 <a href="javascript:unhide('details');">Details</a><br />
 <div id='details' style='display: none'>
 <p>
 This election will be decided according to the Single Transferable Vote
 rules described <a href="/">here</a> for an election with $num open slots.
 </p>
 <p>
 You have one vote.  Use your vote by entering the label of your
 first preference candidate followed by, if desired, the label of your
 second preference candidate, and so on until you are indifferent about
 the remaining candidates.  The sequence of your preferences is crucial.
 You should continue to express preferences only as long as you are able
 to place successive candidates in order.  A later preference is considered
 only if an earlier preference has a surplus above the quota required for
 election, or is excluded because of insufficient support.  Under no
 circumstances will a later preference count against an earlier preference.
 </p>
 <p>
 You may list as many candidates as you wish, but no more than once per
 vote (e.g., "xsxp" would be rejected).
 </p>
 $trailer
 </div>
 $other_issues
 </body>
 </html>
 EoSTV
 }

 sub stv_form_interactive {
     my ($num, $voter, $issue_name, $issue_content, $trailer) = @_;
     my $other_issues = other_issues($issue_name, $voter);
     my @chars;
     my @names;
     while ($issue_content =~ m/\[([a-z])\]\s+(.+)/g) {
         push @chars, "'$1'";
         push @names, "\"$2\"";
     }
     my $str_candidates = join(", ", @names);
     my $str_chars = join(", ", @chars);
     my $str_statements = ""; # TODO!
     my $num_candidates = scalar(@names);
     return <<EoSTV;
  <!DOCTYPE HTML>
 <html>
     <head>
         <link rel="stylesheet" href="/steve_interactive.css">
         <script type="text/javascript">

         // STV Data
         var seats = $num; // Number of seats on the board

         // Nominees
         var candidates = [ $str_candidates ];
         var chars = [ $str_chars ];

         // Statements
         var statements = { $str_statements };

         </script>
         <script src="/steve_interactive.js" type="text/javascript"></script>

         <title>Vote on $issue_name</title>
     </head>
     <body onload="shuffleCandidates(); drawCandidates()">
         <h1>Cast your vote &lt;$voter&gt; on $issue_name:</h1>
         <p style="text-align: center;">
             <small><i>Looking for the old text-only version? <a href="?interactive=no">Click here!</a></i></small>
         </p>
         <p>
             This is an interactive ballot for <a
             href="#issue_details">$issue_name</a>, with $num_candidates
             nominated people and $num board seats available. All the
             nominees are placed in random order on the candidate list. To view
             more details about this election, including statements, <a
             href="#issue_details">click here</a>.
         </p>

         <p>
             <b>How to vote:</b><br/> Drag a candidate from the candidate list to the
             ballot box to place them in the vote. You can rearrange your votes as you
             see fit, by dragging candidates up/down on the ballot box list. You may
             place as many candidates in the ballot box as you see fit. If you want to
             remove a single candidate from your ballot box, simply drag the candidate
             back to the list of remaining candidates to the left. The red line
             denotes the cutaway, should all your choices be voted in.
         </p>


         <!-- Issue details goes here -->
         <div class="modal" id="issue_details" aria-hidden="true">
             <div class="modal-dialog">
               <div class="modal-header">
                 <h2>Issue details</h2>
                 <a href="#close" class="btn-close" aria-hidden="true">×</a>
               </div>
               <div class="modal-body">
                 <pre>$issue_content
                 </pre>
               </div>
               <div class="modal-footer">
                 <a href="#close" class="btn">Close</a>
               </div>
               </div>
             </div>
         </div>

         <div id="candidates" ondragover="event.preventDefault();"
          ondragenter="event.preventDefault();" ondragend="event.preventDefault();"
          ondrop="dropBack(event);">
             Not seeing the canidate list? Please enable JavaScript!
         </div>

         <div id="ballotbox" ondragover="event.preventDefault();"
          ondragenter="event.preventDefault();" ondragend="event.preventDefault();"
          ondrop="dropCandidate(event)">
             <font color='red'><h3>Drag candidates over here to vote for them</h3></font>
             <ol id="ballot">
                 <img src="/images/target.png" style="margin-left: 100px;"/>
             </ol>
             <div id="stv">
                 <form method="POST">
                     <b>Your STV order:</b>
                     <input type="text" id="vote" name="vote" style="width: 140px; font-family:
                     monospace;"/> <input type="submit" class="btn-green" value="Cast votes"/> &nbsp;
                     <input type="button" value="Reset" class="btn-red" onclick="resetList()"/>
                 </form>
             </div>
         </div>
         <div style="width: 100%; float: left;">
             <p>
                 $trailer
             </p>
             <p>
                 $other_issues
             </p>
         </div>
     </body>
 </html>
 EoSTV
 }

 sub select_form {
     my ($num, $voter, $issue_name, $issue_content, $trailer) = @_;
     my $other_issues = other_issues($issue_name, $voter);

     return <<EoSELECT;
 <html>
 <head>
 <title>Vote on $issue_name</title>
 <script type='text/javascript'>
   function unhide(id) {
     document.getElementById(id).style.display = 'inline';
   }
 </script>
 <link rel="stylesheet" type="text/css" href="/cast-style.css">
 </head>
 <body>

 <h1>Cast your vote &lt;$voter&gt; on $issue_name:</h1>
 <center>
 <div id="issue"><pre>$issue_content</pre></div>
 </center>
 <hr />

 <p>
 To cast your vote, fill in the form entry for your vote below with a
 single word containing the concatenated <b>labels</b> of the candidates of your
 $num choices.  In other words, if you want to vote for the candidates
 labeled [x], [s], and [p], then your vote should be "xsp" (order does
 not matter).
 </p>
 <center>
 <form method="POST">
       <strong>Vote:</strong> <input type="text" name="vote"><br />
       <input type="submit" name="submit" value="Submit">
 </form>
 </center>

 <a href="javascript:unhide('details');">Details</a><br />
 <div id='details' style='display: none'>
 $trailer
 </div>
 $other_issues
 </body>
 </html>
 EoSELECT
 }

 sub other_issues {
     my ($issue_name, $voter) = @_;
     my ($group) = $issue_name =~ /^(\w+)/;
     my $html = "<h2>Issues in Group $group</h2>\n<ol>";

     opendir my $dir, "$VOTE_ISSUEDIR/$group"
         or die "Can't open group dir: $!\n";

     for my $issue (sort grep /^\d+-\w+$/, readdir $dir) {
         my $issue_id = filestuff("$VOTE_ISSUEDIR/$group/$issue/issue");
         my $hash = get_hash_of("$issue_id:$voter");
         $html .= "$group-$issue" eq $issue_name
             ?  qq(<li>$issue</li>\n)
                 : qq(<li><a href="/cast/$group-$issue/$hash">$issue</a></li>\n);
     }

     return $html . "</ol>";
 }

 =head1 COPYRIGHT

 Copyright (C) 2010  The Apache Software Foundation. All rights reserved.
                     This code is Apache-specific and not for distribution.
	#!/usr/bin/perl -T
	#####
	# Licensed to the Apache Software Foundation (ASF) under one or more
	# contributor license agreements. See the NOTICE file distributed with
	# this work for additional information regarding copyright ownership.
	# The ASF licenses this file to You under the Apache License, Version 2.0
	# (the "License"); you may not use this file except in compliance with
	# the License. You may obtain a copy of the License at
	#
	# http://www.apache.org/licenses/LICENSE-2.0
	#
	# Unless required by applicable law or agreed to in writing, software
	# distributed under the License is distributed on an "AS IS" BASIS,
	# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	# See the License for the specific language governing permissions and
	# limitations under the License.
	#####

	# cast-vote.pl - REST-compliant CGI script that invokes the vote tool
	# on validated input.
	# Assumes the url-path for this script is /cast.

	use warnings;
	use CGI;
	use CGI::Carp qw/fatalsToBrowser/;
	use Digest::MD5;
	use URI::Escape;

	BEGIN {
	unshift @INC, "/home/voter/bin";
	}
	use steve;
	use strict;

	my $VOTE_TOOL = "/home/voter/bin/vote";
	my $VOTE_TMPDIR = "/home/voter/tmp";
	my $VOTE_ISSUEDIR = "/home/voter/issues";

	$ENV{PATH_INFO} =~ m!^/(\w+)-(\d+-\w+)/([0-9a-f]{32})$!
	or die "Malformed URL\n";
	my ($group, $issue, $hash) = ($1, $2, $3);

	my $voter = fetch_voter($group, $issue, $hash)
	or die "Invalid URL\n";

	my ($type, @valid_vote) = fetch_type_info($group, $issue)
	or die "Can't identify issue type!\n";

	my $issue_name = "$group-$issue";

	my $q = CGI->new;

	my $interactive = $q->param('interactive') eq "no" ? 0 : 1;

	if ($ENV{REQUEST_METHOD} eq "GET" or $ENV{REQUEST_METHOD} eq "HEAD") {

	open my $fh, "$VOTE_ISSUEDIR/$group/$issue/issue"
	or die "Can't open issue: $!\n";
	read $fh, my $issue_content, -s $fh;
	close $fh;

	$issue_content = $q->escapeHTML($issue_content);
	$issue_content =~ s#\b(https?://\S+)#"<a href=\"/redirect?uri=" . uri_escape_utf8($1) . "\">$1</a>"#ge;
	$issue_content = join "\n", randomize split /\n/, $issue_content;
	$issue_content .= "\n"; # split knocks off the last newline

	open $fh, "$VOTE_ISSUEDIR/$group/$issue/monitors"
	or die "Can't open monitor file: $!\n";
	read $fh, my $monitors, -s $fh;
	close $fh;
	chomp $monitors;

	my $trailer = <<EOT;
	<p>
	If for some reason you are unable to fill out the form and submit it,
	then you can vote by proxy: simply send this URL to some Apache committer
	that you trust, preferably with instructions on how you wish them to
	place your vote. <strong>DO NOT DISCLOSE THIS URL TO ANYONE ELSE, AS THEY
	WILL BE ABLE TO ACT AS YOUR PROXY AND CAST VOTES ON YOUR BEHALF IF
	YOU DO.</strong>
	</p>
	<p>
	For verification purposes, you will be receiving an e-mail notification
	each time your voting key is used. Repeat votes will be considered
	a complete replacement of your prior vote. Your vote will be
	recorded in a tally file and sent to the vote monitors along with
	a different unique key, minimizing the chance that the contents of
	your vote will be accidentally seen by someone else while associated
	to you. That is why the verification e-mail will only state that you
	have voted, rather than including how you voted.
	</p>
	<p>
	If you have any problems or questions, send an email to the vote monitors
	for this issue: <a href="mailto:$monitors">$monitors</a>.
	</p>
	EOT

	my $output = "Content-Type: text/html; charset=utf-8\n\n";

	if ($type eq "yna") {
	$output .= yna_form($voter, $issue_name, $issue_content, $trailer);
	}
	elsif ($type =~ /^stv([1-9])$/ && $interactive) {
	$output .= stv_form_interactive($1, $voter, $issue_name, $issue_content, $trailer);
	}
	elsif ($type =~ /^stv([1-9])$/) {
	$output .= stv_form($1, $voter, $issue_name, $issue_content, $trailer);
	}
	elsif ($type =~ /^select([1-9])$/) {
	$output .= select_form($1, $voter, $issue_name, $issue_content, $trailer);
	}

	print $output;
	exit;

	}
	elsif ($ENV{REQUEST_METHOD} eq "POST") {

	my $vote = $q->param("vote");
	die "Vote undefined\n" unless defined $vote;
	$vote =~ tr/A-Z/a-z/;
	$vote =~ tr/"'//d;
	$vote = $q->escapeHTML($vote); # better safe than sorry

	if ($type eq "yna") {
	grep $_ eq $vote, @valid_vote or die "Invalid yna vote: $vote\n";
	}
	elsif ($type =~ /([1-9])$/) {
	my $selection = $1;

	if ($type =~ /^select/) {
	length($vote) <= $selection
	or die "Too many candidates: only select up to $selection labels: $vote\n";
	}

	my $char_class = "[" . join("",@valid_vote) . "]";
	$vote =~ /^$char_class+$/
	or die "$type vote out of range (no such candidate label): $vote\n";

	my %uniq;
	@uniq{split //, $vote} = ();
	length($vote) == keys %uniq
	or die "Duplicate candidate labels in $type vote: $vote\n";
	}

	# vote is valid, time to execute the program...

	umask 077;
	local %ENV;

	my $tmpfile = "$VOTE_TMPDIR/$issue.$$";
	my $cmd = "$VOTE_TOOL > $tmpfile 2>&1";
	open my $vote_tool, "\| $cmd"
	or die "Can't popen '$cmd': $!\n";

	local $SIG{TERM} = local $SIG{INT} = local $SIG{HUP} = local $SIG{PIPE}
	= sub {
	unlink $tmpfile;
	die "SIG$_[0] caught\n";
	};

	print $vote_tool "$issue_name\n";
	print $vote_tool "$hash\n";
	print $vote_tool "$vote\n";

	close $vote_tool;
	my $vote_status = $?;
	my $vote_log;

	my $http_status = $vote_status == 0 ? 200 : 500;

	if (open my $fh, $tmpfile) {
	read $fh, $vote_log, -s $fh;
	close $fh;
	unlink $tmpfile;
	}
	else {
	unlink $tmpfile;
	die "Couldn't open $tmpfile: vote status=$vote_status: $!\n";
	}

	my $comment = $vote_status == 0
	? "Congratulations, it appears your vote was successfully cast.<br />"
	: qq(<a href="/cast/$issue_name/$hash">Please try again</a>,)
	. " it appears there was a problem with your vote.<br />";

	my $other_issues = eval { other_issues($issue_name, $voter) };
	die "Can't list other issues: vote status=$vote_status: $@" if $@;

	print <<EoVOTE;
	Status: $http_status
	Content-Type: text/html; charset=utf-8

	<html>
	<head>
	<title>Vote Cast on $issue_name</title>
	<script type='text/javascript'>
	function unhide(id) {
	document.getElementById(id).style.display = 'inline';
	}
	</script>
	<link rel="stylesheet" type="text/css" href="/cast-style.css">
	</head>
	<body>
	<h1>Vote results for <$voter> on $issue_name...</h1>
	<h2>Vote Tool Exit Status: $vote_status (0 means success!)</h2>
	$comment
	<a href="javascript:unhide('details');">Details</a><br />
	<textarea id='details' style='display: none' readonly>$vote_log</textarea>
	$other_issues
	</body>
	</html>
	EoVOTE

	exit;

	}
	else {
	die "Unsupported method $ENV{REQUEST_METHOD}\n";
	}

	sub fetch_type_info {
	my ($group, $issue) = @_;
	open my $fh, "$VOTE_ISSUEDIR/$group/$issue/vote_type" or return;
	chomp(my @data = <$fh>);
	return @data;
	}

	sub fetch_voter {
	my ($group, $issue, $hash) = @_;
	my $issue_id = eval { filestuff("$VOTE_ISSUEDIR/$group/$issue/issue") }
	or return;
	for my $voter (eval { get_group("$VOTE_ISSUEDIR/$group/voters") }) {
	return $voter if get_hash_of("$issue_id:$voter") eq $hash;
	}
	return;
	}

	sub yna_form {
	my ($voter, $issue_name, $issue_content, $trailer) = @_;
	my $other_issues = other_issues($issue_name, $voter);

	return <<EoYNA;
	<html>
	<head>
	<title>Vote on $issue_name</title>
	<script type='text/javascript'>
	function unhide(id) {
	document.getElementById(id).style.display = 'inline';
	}
	</script>
	<link rel="stylesheet" type="text/css" href="/cast-style.css">
	</head>
	<body>
	<h1>Cast your vote <$voter> on $issue_name:</h1>
	<center>
	<div id="issue"><pre>$issue_content</pre></div>
	</center>

	<hr />

	<p>
	To cast your vote, select <strong>yes</strong>, <strong>no</strong>,
	or <strong>abstain</strong> from the form below and click
	on the "Submit" button.
	</p>
	<center>
	<form method="POST">
	<div style="text-align:left; width: 10em">
	<input type="radio" name="vote" value="yes"> <strong>yes</strong><br />
	<input type="radio" name="vote" value="no"> <strong>no</strong><br />
	<input type="radio" name="vote" value="abstain"> <strong>abstain</strong><br />
	<input type="submit" name="submit" value="Submit">
	</div>
	</form>
	</center>
	<a href="javascript:unhide('details');">Details</a><br />
	<div id='details' style='display: none'>
	$trailer
	</div>
	$other_issues
	</body>
	</html>
	EoYNA
	}

	sub stv_form {
	my ($num, $voter, $issue_name, $issue_content, $trailer) = @_;
	my $other_issues = other_issues($issue_name, $voter);

	return <<EoSTV;
	<html>
	<head>
	<title>Vote on $issue_name</title>
	<script type='text/javascript'>
	function unhide(id) {
	document.getElementById(id).style.display = 'inline';
	}
	</script>
	<link rel="stylesheet" type="text/css" href="/cast-style.css">
	</head>
	<body>

	<h1>Cast your vote <$voter> on $issue_name:</h1>
	<center>
	<div id="issue"><pre>$issue_content</pre></div>
	</center>
	<hr />
	<p>
	Looking for the interactive version? <a href="?">Click here!</a>
	</p>
	<p>
	To cast your vote, fill in the form entry for your vote below with a
	single word containing the concatenated <b>labels</b> of the candidates in the
	order that you wish them to be selected. In other words, if you want to
	vote for the candidates labeled [x], [s], and [p], in that order, then
	your vote should be "xsp".
	</p>
	<p>
	Then click on the "Submit" button to ultimately cast your vote.
	</p>
	<center>
	<form method="POST">
	<strong>Vote:</strong> <input type="text" name="vote"><br />
	<input type="submit" name="submit" value="Submit">
	</form>
	</center>
	<a href="javascript:unhide('details');">Details</a><br />
	<div id='details' style='display: none'>
	<p>
	This election will be decided according to the Single Transferable Vote
	rules described <a href="/">here</a> for an election with $num open slots.
	</p>
	<p>
	You have one vote. Use your vote by entering the label of your
	first preference candidate followed by, if desired, the label of your
	second preference candidate, and so on until you are indifferent about
	the remaining candidates. The sequence of your preferences is crucial.
	You should continue to express preferences only as long as you are able
	to place successive candidates in order. A later preference is considered
	only if an earlier preference has a surplus above the quota required for
	election, or is excluded because of insufficient support. Under no
	circumstances will a later preference count against an earlier preference.
	</p>
	<p>
	You may list as many candidates as you wish, but no more than once per
	vote (e.g., "xsxp" would be rejected).
	</p>
	$trailer
	</div>
	$other_issues
	</body>
	</html>
	EoSTV
	}

	sub stv_form_interactive {
	my ($num, $voter, $issue_name, $issue_content, $trailer) = @_;
	my $other_issues = other_issues($issue_name, $voter);
	my @chars;
	my @names;
	while ($issue_content =~ m/\[([a-z])\]\s+(.+)/g) {
	push @chars, "'$1'";
	push @names, "\"$2\"";
	}
	my $str_candidates = join(", ", @names);
	my $str_chars = join(", ", @chars);
	my $str_statements = ""; # TODO!
	my $num_candidates = scalar(@names);
	return <<EoSTV;
	<!DOCTYPE HTML>
	<html>
	<head>
	<link rel="stylesheet" href="/steve_interactive.css">
	<script type="text/javascript">

	// STV Data
	var seats = $num; // Number of seats on the board

	// Nominees
	var candidates = [ $str_candidates ];
	var chars = [ $str_chars ];

	// Statements
	var statements = { $str_statements };

	</script>
	<script src="/steve_interactive.js" type="text/javascript"></script>

	<title>Vote on $issue_name</title>
	</head>
	<body onload="shuffleCandidates(); drawCandidates()">
	<h1>Cast your vote <$voter> on $issue_name:</h1>
	<p style="text-align: center;">
	<small><i>Looking for the old text-only version? <a href="?interactive=no">Click here!</a></i></small>
	</p>
	<p>
	This is an interactive ballot for <a
	href="#issue_details">$issue_name</a>, with $num_candidates
	nominated people and $num board seats available. All the
	nominees are placed in random order on the candidate list. To view
	more details about this election, including statements, <a
	href="#issue_details">click here</a>.
	</p>

	<p>
	<b>How to vote:</b><br/> Drag a candidate from the candidate list to the
	ballot box to place them in the vote. You can rearrange your votes as you
	see fit, by dragging candidates up/down on the ballot box list. You may
	place as many candidates in the ballot box as you see fit. If you want to
	remove a single candidate from your ballot box, simply drag the candidate
	back to the list of remaining candidates to the left. The red line
	denotes the cutaway, should all your choices be voted in.
	</p>


	<!-- Issue details goes here -->
	<div class="modal" id="issue_details" aria-hidden="true">
	<div class="modal-dialog">
	<div class="modal-header">
	<h2>Issue details</h2>
	<a href="#close" class="btn-close" aria-hidden="true">×</a>
	</div>
	<div class="modal-body">
	<pre>$issue_content
	</pre>
	</div>
	<div class="modal-footer">
	<a href="#close" class="btn">Close</a>
	</div>
	</div>
	</div>
	</div>

	<div id="candidates" ondragover="event.preventDefault();"
	ondragenter="event.preventDefault();" ondragend="event.preventDefault();"
	ondrop="dropBack(event);">
	Not seeing the canidate list? Please enable JavaScript!
	</div>

	<div id="ballotbox" ondragover="event.preventDefault();"
	ondragenter="event.preventDefault();" ondragend="event.preventDefault();"
	ondrop="dropCandidate(event)">
	<font color='red'><h3>Drag candidates over here to vote for them</h3></font>
	<ol id="ballot">
	<img src="/images/target.png" style="margin-left: 100px;"/>
	</ol>
	<div id="stv">
	<form method="POST">
	<b>Your STV order:</b>
	<input type="text" id="vote" name="vote" style="width: 140px; font-family:
	monospace;"/> <input type="submit" class="btn-green" value="Cast votes"/>
	<input type="button" value="Reset" class="btn-red" onclick="resetList()"/>
	</form>
	</div>
	</div>
	<div style="width: 100%; float: left;">
	<p>
	$trailer
	</p>
	<p>
	$other_issues
	</p>
	</div>
	</body>
	</html>
	EoSTV
	}

	sub select_form {
	my ($num, $voter, $issue_name, $issue_content, $trailer) = @_;
	my $other_issues = other_issues($issue_name, $voter);

	return <<EoSELECT;
	<html>
	<head>
	<title>Vote on $issue_name</title>
	<script type='text/javascript'>
	function unhide(id) {
	document.getElementById(id).style.display = 'inline';
	}
	</script>
	<link rel="stylesheet" type="text/css" href="/cast-style.css">
	</head>
	<body>

	<h1>Cast your vote <$voter> on $issue_name:</h1>
	<center>
	<div id="issue"><pre>$issue_content</pre></div>
	</center>
	<hr />

	<p>
	To cast your vote, fill in the form entry for your vote below with a
	single word containing the concatenated <b>labels</b> of the candidates of your
	$num choices. In other words, if you want to vote for the candidates
	labeled [x], [s], and [p], then your vote should be "xsp" (order does
	not matter).
	</p>
	<center>
	<form method="POST">
	<strong>Vote:</strong> <input type="text" name="vote"><br />
	<input type="submit" name="submit" value="Submit">
	</form>
	</center>

	<a href="javascript:unhide('details');">Details</a><br />
	<div id='details' style='display: none'>
	$trailer
	</div>
	$other_issues
	</body>
	</html>
	EoSELECT
	}

	sub other_issues {
	my ($issue_name, $voter) = @_;
	my ($group) = $issue_name =~ /^(\w+)/;
	my $html = "<h2>Issues in Group $group</h2>\n<ol>";

	opendir my $dir, "$VOTE_ISSUEDIR/$group"
	or die "Can't open group dir: $!\n";

	for my $issue (sort grep /^\d+-\w+$/, readdir $dir) {
	my $issue_id = filestuff("$VOTE_ISSUEDIR/$group/$issue/issue");
	my $hash = get_hash_of("$issue_id:$voter");
	$html .= "$group-$issue" eq $issue_name
	? qq(<li>$issue</li>\n)
	: qq(<li><a href="/cast/$group-$issue/$hash">$issue</a></li>\n);
	}

	return $html . "</ol>";
	}

	=head1 COPYRIGHT

	Copyright (C) 2010 The Apache Software Foundation. All rights reserved.
	This code is Apache-specific and not for distribution.