sub lookup {
# --------------------------------------------------------
my $found = 0;
my $passfound = 0;
my ($line,@lines,$passline,@passlines,$message,@passdata,$outline);

$db_customer_file_name = $db_script_path . "/secure/customer.db";
open (DB, "<$db_customer_file_name") or &cgierr("error in lookup. unable to open db file: $db_file_name.\nReason: $!");
if ($db_use_flock) { flock(DB, 1); }
@lines = <DB>;
close DB;
foreach $line (@lines) {
chomp $line;
@data = &split_decode($line);
if ((lc($in{'lookup'}) eq lc($data[3])) or ($in{'lookup'}eq $data[0])) {
$found=1;
last;

}
}
unless ($found) {
&html_lookup_form("No record found for $in{'lookup'}");
return;
}

open (PASS, "<$auth_pw_file") or &cgierr ("unable to open: $auth_pw_file.\nReason: $!");
if ($db_use_flock) { flock(PASS, 1) }
@passlines = <PASS>;
close PASS;
foreach $passline (@passlines) {
if ($passline =~ /^$data[0]:/) {
$passfound = $passline;
}
else {
$output .= $passline;
}
}

unless ($data[6]) {
&html_lookup_form("Not authorized to lookup $in{'lookup'}");
return;
}

unless ($passfound) {
&html_lookup_form("$data[0] not found in password file");
return;
}

my $password = &generate_password;

srand( time() ^ ($$ ($$ << 15)) ); # Seed Random Number
my @salt_chars = ('A' .. 'Z', 0 .. 9, 'a' .. 'z', '.', '/');
my $salt = join '', @salt_chars[rand 64, rand 64];
my $encrypted = crypt($password, $salt);

chomp $passfound;
@passdata = split (/:/, $passfound);

@passdata[1] = $encrypted;
$outline = join ':',@passdata;
$output .= $outline . "\n";

open (PASS, ">$auth_pw_file") or &cgierr ("unable to open: $auth_pw_file.\nReason: $!");
if ($db_use_flock) {
flock(PASS, 2) or &cgierr("unable to get exclusive lock on $auth_pw_file.\nReason: $!");
}
print PASS $output;
close PASS;


$newpassword = $password;

#$message = $mailtext;
if ($db_on_NT) {
require $db_script_path . "/secure/Mailer.pm";
&send_lookup_pass_smtp;
}
else {
&send_lookup_pass_sendmail;
}

&html_lookup_success($message);
}