xoonips/AL/commonal.cc

/*
 * 
 * $Revision: 1.16 $
 * $Log: commonal.cc,v $
 * Revision 1.16  2004/11/27 06:29:29  youi
 * getAccountCount??絎?臂?
 * dumpGids??絎?臂?
 * insertGroup, deleteGroup, updateGroup??絎?臂?
 * getGroup, getGroups??絎?臂?
 * ???若?帥???若?劫?????????弱?冴?????鐚?RES_DB_NOT_INITIALIZED??菴????????????∽?違??申??
 * (???綽????∽?違??罧??ｃ??????)
 *
 * Revision 1.15  2004/11/27 02:22:22  aga
 * ??nitializeDB????ddSlashes()???若?吟???純?＜??????篆??.
 *
 * Revision 1.14  2004/11/27 01:07:31  youi
 * criteria2str: LIMIT??RDER BY?????????ャ???帥????.
 *
 * Revision 1.13  2004/11/27 00:35:39  youi
 * getAccounts??絎?臂?
 * getAccount??篆??鐚???????etAccounts???若?喝?冴??.
 * criteria2str??絎?臂?
 *
 * Revision 1.12  2004/11/26 09:45:28  youi
 * getAccount??絎?臂?
 *
 * Revision 1.11  2004/11/26 08:16:26  aga
 * ??etSession, loginUser, createSession, freeResult(const session_t*) 篆??.
 *
 * Revision 1.10  2004/11/26 07:57:42  youi
 * updateAccount, deleteAccount??絎?臂?
 * mysql_query紊掩??????tderr?吾?????若?潟?若?????????若?＜???祉?若?吾???阪??.
 *
 * Revision 1.9  2004/11/26 07:38:02  aga
 * ??AILUE -> FAILURE.
 *
 * Revision 1.8  2004/11/26 06:36:55  aga
 * ??reateSession, getSession ??篏???.
 *
 * Revision 1.7  2004/11/26 04:51:47  youi
 * dbprefix??絎?臂?????.
 * insertAccount??絎?臂?????.
 * isValidSessionID??絎?臂?????.
 *
 * Revision 1.6  2004/11/26 04:35:55  aga
 * ??oginUser(), logoutUser()??篏???.
 *
 * Revision 1.5  2004/11/26 01:08:25  aga
 * ??ddSlashes()篏???.
 *
 * Revision 1.4  2004/11/25 12:14:29  youi
 * getUid????????絎?臂?????.
 *
 * Revision 1.3  2004/11/25 11:13:59  youi
 * getLastErrorString/setLastErrorString??絎?臂?
 *
 * Revision 1.2  2004/11/25 08:55:19  youi
 * 綣??違??????篆??.
 * freeResult??菴遵??.
 *
 * Revision 1.1  2004/11/25 05:14:58  youi
 * initial version
 *
 * 
 */
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <mysql.h>
#include <errmsg.h>
#include <string>
using namespace std;

#include "common.h"
#include "account.h"
#include "group.h"
#include "session.h"
#include "criteria.h"
#include "commonal.h"


static MYSQL* mysql = NULL; //!< MySQL????潟????/span>
static string dbprefix; //!< XOOPS???若?帥???若?鴻???若??????REFIX

/** 
 * 
 * php??ddslashes????????
 * 
 * @param addslashes???鴻????絖?????NULL??絎?筝?????
 * @return addslashes????????絖???
 */
string addSlashes( const char *str )
{
        if ( mysql == NULL ){
                string s;
                return s;
        }
        int len = strlen(str);
        char *buf = new char[len*2+1];
        int bufLen = mysql_real_escape_string( mysql, buf, str, len );
        string s( buf, bufLen );
        return s;
}

/**
 * 
 * criteria ?? SQL?????????
 * 
 * 
 * 
 */
string criteria2str( criteria* cri )
{
    string sql;
    
    const orderby* odrby = cri -> headOrderBy( );
    if( odrby != 0 ){
        sql += " ORDER BY " + string( odrby -> getColumn( ) );
        sql += ( odrby -> getOrder( ) == orderby::DESC ) ? " DESC" : " ";
        while( ( odrby = cri -> nextOrderBy( ) ) != 0 ){
            sql += ", " + string( odrby -> getColumn( ) );
            sql += ( odrby -> getOrder( ) == orderby::DESC ) ? " DESC" : " ";
        }
    }

    if( cri -> getLimitStart( ) != 0 || cri -> getLimitRows( ) != 0 ){
        sql += " LIMIT " + string( intToString( cri -> getLimitStart( ) ) )
            + ", " + string( intToString( cri -> getLimitRows( ) ) );
    }
    return sql;
}

/**
 * 
 * ???若?帥???若?鴻????????
 * 
 * @param host ???若?帥???若?鴻?????鴻????
 * @param user ???若?帥???若?鴻???≪???祉?鴻???????若?九??
 * @param password 筝?荐????若?吟?????鴻???若??
 * @param dbname ???若?帥???若?鴻??????
 * @param prefix XOOPS???若?帥???若?鴻???若??????REFIX
 * @return result_t
 * @refer result_t
 */
result_t initializeDB( const char* host, const char* user, const char* password, const char* dbname, const char* prefix )
{
    // ?≪??･膓?筝???????筝???????/span>
    if ( mysql != NULL )
        mysql_close( mysql );
    
    dbprefix = prefix;
    
    // ????????･膓?
    mysql = mysql_init(NULL);
    if ( mysql == NULL ){
        return RES_DB_INITIALIZE_ERROR;
    }
    char *unix_socket = NULL; // ?
    uint flag = 0;       // ?
    if ( NULL == mysql_real_connect( mysql, host, user, password, dbname, 3306, unix_socket, flag ) ){
        return RES_DB_CONNECT_ERROR;
    }
    
    return RES_OK;
}


/**
 * 
 * Platform???若?倶?粋??倶????緇?
 * 
 * @param 
 * @return 
 * 
 */
bool isActivated( sessionid_t sid, userid_t uid )
{
    if( mysql == NULL ) return false;
    if( !isValidSessionID( sid ) ) return false;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    
    sql = "SELECT * FROM " + dbprefix + "_vpaccount_users ";
    sql += "WHERE activate=1 and uid=" + string( unsignedIntToString( uid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return false;
    }
    result = mysql_store_result( mysql ) ;
    if( row = mysql_fetch_row(result) ){
        mysql_free_result( result );
        return true;
    }
    return false;
}

/**
 * 
 * Platform???若?倶?粋??倶??紊???/span>
 * 
 * @param 
 * @return 
 * 
 */
result_t activate( sessionid_t sid, userid_t uid, bool activate )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    
    sql = "UPDATE " + dbprefix + "_vpaccount_users ";
    sql += "SET activate=" + string( activate ? "1" : "0" );
    sql += " WHERE uid=" + string( unsignedIntToString( uid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    if ( mysql_affected_rows(mysql) == 0 ){
        // ?贋?医け??
        return RES_NO_SUCH_USER;
    }
    return RES_OK;
}

/**
 * 
 * ?≪?????潟????/span>
 * 
 * @param 
 * @return 
 * 
 */
int getAccountCount( sessionid_t sid )
{
    if( mysql == NULL ) return 0;
    if( !isValidSessionID( sid ) ) return 0;
    
    int ret = 0;
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    
    //?≪?????潟???違??羆?????
    sql = "SELECT COUNT(*) FROM " + dbprefix + "_vpaccount_users ";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return 0;
    }
    result = mysql_store_result( mysql ) ;
    if( row = mysql_fetch_row(result) ){
        ret = atoi( row[ 0 ] );
    }else{
        mysql_free_result( result );
        return 0;
    }
    mysql_free_result( result );
    return ret;
}

/**
 * 
 * ?≪?????潟??????/span>
 * 
 * @param 
 * @return RES_OK | RES_NO_SUCH_SESSION | RES_DB_QUERY_ERROR
 * 
 */
result_t deleteAccount( sessionid_t sid, userid_t uid )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    sql = "DELETE FROM " + dbprefix + "_users ";
    sql += "WHERE uid = " + string( unsignedIntToString( uid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    sql = "DELETE FROM " + dbprefix + "_vpaccount_users ";
    sql += "WHERE uid = " + string( unsignedIntToString( uid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    return RES_OK;
}

/**
 * 
 * ?≪?????潟?????怨??
 * 
 * @param sid ?祉???激?с??D
 * @param uid ??緇??????????若?吟??ID
 * @param acc ??緇??????≪?????潟??????account_t)?????ゃ?潟?帥???吾??莨若??綣???/span>
 * @return RES_OK | RES_NO_SUCH_USER | RES_NO_SUCH_SESSION | RES_DB_QUERY_ERROR | RES_ERROR
 * 
 */
result_t getAccount( sessionid_t sid, userid_t uid, const account_t** acc )
{
    int len;
    static criteria c;
    result_t res = getAccounts( sid, &uid, 1, &c, acc, &len );
    if( len == 0 ) return RES_NO_SUCH_USER;
    return res;
}

/**
 * 
 * ?≪?????潟?????怨??
 * 
 * @param sid ?祉???激?с??D
 * @param uids ??緇??????????若?吟??ID??????
 * @param uidsLen uids???????膣???/span>
 * @param cri 腟???????我??絎?鐚??純?若???＞散??絎?
 * @param accounts 罎?膣∝??????????????ゃ?潟?帥???吾??莨若??綣???/span>
 * @param accountsLen 罎?膣∝???????????*accounts???膣???
 * @return RES_OK| RES_DB_NOT_INITIALIZED| RES_NO_SUCH_SESSION | RES_DB_QUERY_ERROR
 * 
 */
result_t getAccounts( sessionid_t sid, const userid_t* uids, int uidsLen, criteria_t* cri, const account_t** accounts, int* accountsLen )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    account_t* dst = new account_t[ uidsLen ];
    
    sql += "SELECT u1.uid, u1.name, u1.uname, u1.email, u1.url, u1.user_avatar, u1.user_regdate, u1.user_icq, u1.user_from, u1.user_sig, u1.user_viewemail, u1.actkey, u1.user_aim, u1.user_yim, u1.user_msnm, u1.pass, u1.posts, u1.attachsig, u1.rank, u1.level, u1.theme, u1.timezone_offset, u1.last_login, u1.umode, u1.uorder, u1.notify_method, u1.notify_mode, u1.user_occ, u1.bio, u1.user_intrest, u1.user_mailok, u2.activate, u2.address, u2.institute, u2.tel, u2.organization, u2.country, u2.zipcode, u2.fax, u2.base_url, u2.notice_mail, u2.notice_mail_since ";
    sql += "FROM " + dbprefix + "_users AS u1, " + dbprefix + "_vpaccount_users AS u2 ";
    sql += "WHERE u1.uid = u2.uid AND ( u1.uid=" + string( unsignedIntToString( uids[ 0 ] ) );
    for( int i = 1; i < uidsLen; i++ ){
        sql += " OR u1.uid=" + string( unsignedIntToString( uids[ i ] ) );
    }
    sql += " ) ";
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    result = mysql_use_result( mysql ) ;
    *accountsLen=0;
    for( int i = 0; ( row = mysql_fetch_row(result) ) != 0 && i < uidsLen ; i++ ){
        dst[ i ].setUID( atoi( row[ 0 ] ) );
        dst[ i ].setName( row[ 1 ] );
        dst[ i ].setUname( row[ 2 ] );
        dst[ i ].setEmail( row[ 3 ] );
        dst[ i ].setURL( row[ 4 ] );
        dst[ i ].setUserAvatar( row[ 5 ] );
        dst[ i ].setUserRegdate( atoi( row[ 6 ] ) );
        dst[ i ].setUserIcq( row[ 7 ] );
        dst[ i ].setUserFrom( row[ 8 ] );
        dst[ i ].setUserSig( row[ 9 ] );
        dst[ i ].setUserViewemail( atoi( row[ 10 ] ) );
        dst[ i ].setActkey( row[ 11 ] );
        dst[ i ].setUserAim( row[ 12 ] );
        dst[ i ].setUserYim( row[ 13 ] );
        dst[ i ].setUserMsnm( row[ 14 ] );
        dst[ i ].setPass( row[ 15 ] );
        dst[ i ].setPosts( atoi( row[ 16 ] ) );
        dst[ i ].setAttachsig( atoi( row[ 17 ] ) );
        dst[ i ].setRank( atoi( row[ 18 ] ) );
        dst[ i ].setLevel( atoi( row[ 19 ] ) );
        dst[ i ].setTheme( row[ 20 ] );
        dst[ i ].setTimezoneOffset( atof( row[ 21 ] ) );
        dst[ i ].setLastLogin( atoi( row[ 22 ] ) );
        dst[ i ].setUmode( row[ 23 ] );
        dst[ i ].setUorder( atoi( row[ 24 ] ) );
        dst[ i ].setNotifyMethod( atoi( row[ 25 ] ) );
        dst[ i ].setNotifyMode( atoi( row[ 26 ] ) );
        dst[ i ].setUserOcc( row[ 27 ] );
        dst[ i ].setBio( row[ 28 ] );
        dst[ i ].setUserIntrest( row[ 29 ] );
        dst[ i ].setUserMailok( atoi( row[ 30 ] ) );
        dst[ i ].setActivate( atoi( row[ 31 ] ) );
        dst[ i ].setAddress( row[ 32 ] );
        dst[ i ].setInstitute( row[ 33 ] );
        dst[ i ].setTel( row[ 34 ] );
        dst[ i ].setOrganization( row[ 35 ] );
        dst[ i ].setCountry( row[ 36 ] );
        dst[ i ].setZipcode( row[ 37 ] );
        dst[ i ].setFax( row[ 38 ] );
        dst[ i ].setBaseURL( row[ 39 ] );
        dst[ i ].setNoticeMail( atoi( row[ 40 ] ) );
        dst[ i ].setNoticeMailSince( atoi( row[ 41 ] ) );
        ( *accountsLen )++;
    }
    mysql_free_result( result );
    *accounts = dst;
    return RES_OK;
}

/**
 * 
 * ?≪?????潟???脂??/span>
 * 
 * @param sid ?祉???激?с??/span>
 * @param account ?脂?蚊?????≪?????潟??????/span>
 * @return RES_OK | RES_NO_SUCH_SESSION | RES_DB_QUERY_ERROR | RES_ERROR
 * 
 */
result_t insertAccount( sessionid_t sid, const account_t* account )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    string tmp;
    char buf[ 12 ];
    
    //xoops?????若?吟???若???????吾??莨若??
    sql = "INSERT INTO " + dbprefix + "_users (uname, name, email, url, user_avatar, user_regdate, user_icq, user_from, user_sig, user_viewemail, actkey, user_aim, user_yim, user_msnm, pass, posts, attachsig, rank, level, theme, timezone_offset, last_login, umode, uorder, notify_method, notify_mode, user_occ, bio, user_intrest, user_mailok) VALUES (";
    sql += "'" + string( addSlashes( account -> getUname( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getName( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getEmail( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getURL( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserAvatar( ) ) ) + "', ";
    snprintf( buf, 12, "%d", time( NULL ) );
    sql += string( buf ) + ", ";
    sql += "'" + string( addSlashes( account -> getUserIcq( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserFrom( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserSig( ) ) ) + "', ";
    snprintf( buf, 12, "%d", account -> getUserViewemail( ) );
    sql += string( buf ) + ", ";
    sql += "'" + string( addSlashes( account -> getActkey( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserAim( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserYim( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserMsnm( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getPass( ) ) ) + "', ";
    snprintf( buf, 12, "%d", account -> getPosts( ) );
    sql += string( buf ) + ", ";
    snprintf( buf, 12, "%d", account -> getAttachsig( ) );
    sql += string( buf ) + ", ";
    snprintf( buf, 12, "%d", account -> getRank( ) );
    sql += string( buf ) + ", ";
    snprintf( buf, 12, "%d", account -> getLevel( ) );
    sql += string( buf ) + ", ";
    sql += "'" + string( addSlashes( account -> getTheme( ) ) ) + "', ";
    snprintf( buf, 12, "%lf", account -> getTimezoneOffset( ) );
    sql += string( buf ) + ", ";
    sql += "0, "; //last login
    sql += "'" + string( addSlashes( account -> getUmode( ) ) ) + "', ";
    snprintf( buf, 12, "%d", account -> getUorder( ) );
    sql += string( buf ) + ", ";
    snprintf( buf, 12, "%d", account -> getNotifyMethod( ) );
    sql += string( buf ) + ", ";
    snprintf( buf, 12, "%d", account -> getNotifyMode( ) );
    sql += string( buf ) + ", ";
    sql += "'" + string( addSlashes( account -> getUserOcc( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getBio( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserIntrest( ) ) ) + "', ";
    snprintf( buf, 12, "%d", account -> getUserMailok( ) );
    sql += string( buf ) + ")";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    //???若??D????緇?????
    userid_t uid;
    if( getUid( account -> getUname( ), &uid ) != RES_OK ){
        return RES_ERROR;
    }
    
    //vpaccount?????若?吟???若??????????????宴???吾??莨若??
    sql = "INSERT INTO " + dbprefix + "_vpaccount_users (uid, activate, address, institute, tel, organization, country, zipcode, fax, base_url, notice_mail, notice_mail_since) VALUES (";
    snprintf( buf, 12, "%d", uid );
    sql += string( buf ) + ", ";
    if( account -> getActivate() ){
        sql += "1, ";
    }else{
        sql += "0, ";
    }
    sql += "'" + string( addSlashes( account -> getAddress() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getInstitute() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getTel() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getOrganization() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getCountry() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getZipcode() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getFax() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getBaseURL() ) ) + "', ";
    snprintf( buf, 12, "%d", account -> getNoticeMail( ) );
    sql += string( buf ) + ", ";
    snprintf( buf, 12, "%d", account -> getNoticeMailSince( ) );
    sql += string( buf ) + ")";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        //xoops_users??nsert???????潟?若???????ゃ????
        sql = "DELETE FROM " + dbprefix + "_users where uid=";
        snprintf( buf, 12, "%d", uid );
        sql += string( buf );
        mysql_query( mysql, sql.c_str( ) );
        return RES_DB_QUERY_ERROR;
    }
    
    return RES_OK;
}

/**
 * 
 * ?≪?????潟??紊???/span>
 * 
 * @param 
 * @return RES_OK | RES_NO_SUCH_SESSION | RES_DB_QUERY_ERROR
 * 
 */
result_t updateAccount( sessionid_t sid, const account_t* account )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    string tmp;
    char buf[ 12 ];
    
    //xoops?????若?吟???若???????吾??莨若??
    sql = "UPDATE " + dbprefix + "_users SET ";
    sql += "uname='" + string( addSlashes( account -> getUname( ) ) ) + "', ";
    sql += "name='" + string( addSlashes( account -> getName( ) ) ) + "', ";
    sql += "email='" + string( addSlashes( account -> getEmail( ) ) ) + "', ";
    sql += "url='" + string( addSlashes( account -> getURL( ) ) ) + "', ";
    sql += "user_avatar='" + string( addSlashes( account -> getUserAvatar( ) ) ) + "', ";
    sql += "user_regdate=" + string( intToString( account -> getUserRegdate( ) ) ) + ", ";
    sql += "user_icq='" + string( addSlashes( account -> getUserIcq( ) ) ) + "', ";
    sql += "user_from='" + string( addSlashes( account -> getUserFrom( ) ) ) + "', ";
    sql += "user_sig='" + string( addSlashes( account -> getUserSig( ) ) ) + "', ";
    sql += "user_viewemail=" + string( intToString( account -> getUserViewemail( ) ) ) + ", ";
    sql += "actkey='" + string( addSlashes( account -> getActkey( ) ) ) + "', ";
    sql += "user_aim='" + string( addSlashes( account -> getUserAim( ) ) ) + "', ";
    sql += "user_yim='" + string( addSlashes( account -> getUserYim( ) ) ) + "', ";
    sql += "user_msnm='" + string( addSlashes( account -> getUserMsnm( ) ) ) + "', ";
    sql += "pass='" + string( account -> getPass( ) ) + "', ";
    sql += "posts=" + string( intToString( account -> getPosts( ) ) ) + ", ";
    sql += "attachsig=" + string( intToString( account -> getAttachsig( ) ) ) + ", ";
    sql += "rank=" + string( intToString( account -> getRank( ) ) ) + ", ";
    sql += "level=" + string( intToString( account -> getLevel( ) ) ) + ", ";
    sql += "theme='" + string( addSlashes( account -> getTheme( ) ) ) + "', ";
    snprintf( buf, 12, "%.2f", account -> getTimezoneOffset( ) );
    sql += "timezone_offset=" + string( buf ) + ", ";
    sql += "last_login=" + string( unsignedIntToString( account -> getLastLogin( ) ) ) + ", ";
    sql += "umode='" + string( account -> getUmode( ) ) + "', ";
    sql += "uorder=" + string( intToString( account -> getUorder( ) ) ) + ", ";
    sql += "notify_method=" + string( intToString( account -> getNotifyMethod( ) ) ) + ", ";
    sql += "notify_mode=" + string( intToString( account -> getNotifyMode( ) ) ) + ", ";
    sql += "user_occ='" + string( addSlashes( account -> getUserOcc( ) ) ) + "', ";
    sql += "bio='" + string( addSlashes( account -> getBio( ) ) ) + "', ";
    sql += "user_intrest='" + string( addSlashes( account -> getUserIntrest( ) ) ) + "', ";
    sql += "user_mailok=" + string( intToString( account -> getUserMailok( ) ) );
    sql += " WHERE uid = " + string( intToString( account -> getUID( ) ) );
    
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    //vpaccount?????若?吟???若??????????????宴??筝??吾??????
    sql = "UPDATE " + dbprefix + "_vpaccount_users SET ";
    sql += "activate=";
    if( account -> getActivate() ){
        sql += "1, ";
    }else{
        sql += "0, ";
    }
    sql += "address='" + string( addSlashes( account -> getAddress() ) ) + "', ";
    sql += "institute='" + string( addSlashes( account -> getInstitute() ) ) + "', ";
    sql += "tel='" + string( addSlashes( account -> getTel() ) ) + "', ";
    sql += "organization='" + string( addSlashes( account -> getOrganization() ) ) + "', ";
    sql += "country='" + string( addSlashes( account -> getCountry() ) ) + "', ";
    sql += "zipcode='" + string( addSlashes( account -> getZipcode() ) ) + "', ";
    sql += "fax='" + string( addSlashes( account -> getFax() ) ) + "', ";
    sql += "base_url='" + string( addSlashes( account -> getBaseURL() ) ) + "', ";
    sql += "notice_mail=" + string( intToString( account -> getNoticeMail( ) ) ) + ", ";
    sql += "notice_mail_since=" + string( intToString( account -> getNoticeMailSince( ) ) );
    sql += " WHERE uid = " + string( intToString( account -> getUID( ) ) );
    
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    return RES_OK;
}

/**
 * 
 * criteria_t?ф??絎???????膀??蚊?????若??D??菴???.
 * ???若??D????????腆坂????????????吾??莨若?随????????≪?????鴻??*uids???吾??莨若??.
 * ???????泣?ゃ?冴??*uidsLen???吾??莨若??
 * 
 * @param sid ?祉???激?с??D
 * @param cri 腟???????我??絎?鐚??純?若???＞散??絎?
 * @param uids ???若?吟??ID??????
 * @param uidsLen uids???????膣???/span>
 * @return RES_OK| RES_DB_NOT_INITIALIZED| RES_NO_SUCH_SESSION | RES_DB_QUERY_ERROR| RES_ERROR
 * 
 */
result_t dumpUids( sessionid_t sid, criteria_t* cri, userid_t** uids, int* uidsLen )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    userid_t* dst = 0;
    
    sql = "SELECT COUNT(*) FROM " + dbprefix + "_vpaccount_users ";
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    result = mysql_store_result( mysql ) ;
    if( row = mysql_fetch_row(result) ){
        *uidsLen = atoi( row[ 0 ] );
        dst = new userid_t[ *uidsLen ];
    }else{
        mysql_free_result( result );
        return RES_ERROR;
    }
    mysql_free_result( result );
    
    sql = "SELECT uid FROM " + dbprefix + "_vpaccount_users ";
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    result = mysql_use_result( mysql ) ;
    for( int i = 0; ( row = mysql_fetch_row(result) ) != 0 && i < *uidsLen ; i++ ){
        dst[ i ] = atoi( row[ 0 ] );
    }
    mysql_free_result( result );
    *uids = dst;
    
    return RES_OK;
}

/**
 * 
 * ?違???若????/span>
 * 
 * @param 
 * @return 
 * 
 */
int getGroupCount( sessionid_t sid )
{
    return 0;
}

/**
 * 
 * ??絮??違???若??筝?荀у??
 * 
 * @param 
 * @return 
 * 
 */
result_t getGroupsByUid( sessionid_t sid, userid_t uid, criteria_t* cri, groupid_t** gids, int* gidsLen )
{
    return RES_ERROR;
}

/**
 * 
 * ?違???若??膊∞??罔????????
 * 
 * @param 
 * @return 
 * 
 */
bool isGroupAdmin( sessionid_t sid, groupid_t gid, userid_t uid )
{
    return RES_ERROR;
}

/**
 * 
 * ?違???若??ID筝?荀?/span>
 * 
 * @param 
 * @return 
 * 
 */
result_t dumpGids( sessionid_t sid, criteria_t* cri, groupid_t** gids, int* gidsLen )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    groupid_t* dst = 0;
    
    //?違???若???違??羆?????
    sql = "SELECT COUNT(*) FROM " + dbprefix + "_vpaccount_groups ";
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    result = mysql_store_result( mysql ) ;
    if( row = mysql_fetch_row(result) ){
        *gidsLen = atoi( row[ 0 ] );
        dst = new groupid_t[ *gidsLen ];
    }else{
        mysql_free_result( result );
        return RES_ERROR;
    }
    mysql_free_result( result );
    
    sql = "SELECT gid FROM " + dbprefix + "_vpaccount_groups ";
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    result = mysql_use_result( mysql ) ;
    for( int i = 0; ( row = mysql_fetch_row(result) ) != 0 && i < *gidsLen ; i++ ){
        dst[ i ] = atoi( row[ 0 ] );
    }
    mysql_free_result( result );
    *gids = dst;
    
    return RES_OK;
}

/**
 * 
 * ?違???若??膊∞????ID??緇?
 * 
 * @param 
 * @return 
 * 
 */
result_t dumpGroupAdmins( sessionid_t sid, groupid_t gid, criteria_t* cri, userid_t** uids, int* uidsLen )
{
    return RES_ERROR;
}

/**
 * 
 * ?違???若????絮????若?九????/span>
 * 
 * @param 
 * @return 
 * 
 */
result_t deleteMember( sessionid_t sid, groupid_t gid, userid_t uid )
{
    return RES_ERROR;
}

/**
 * 
 * ?違???若????絮????若?区申??
 * 
 * @param 
 * @return 
 * 
 */
result_t insertMember( sessionid_t sid, groupid_t gid, userid_t uid )
{
    return RES_ERROR;
}

/**
 * 
 * ?違???若????絮????若?九??
 * 
 * @param 
 * @return 
 * 
 */
result_t getMembers( sessionid_t sid, groupid_t gid, criteria_t* cri, userid_t** uids, int* uidsLen )
{
    return RES_ERROR;
}

/**
 * 
 * ?違???若????????/span>
 * 
 * @param 
 * @return 
 * 
 */
result_t deleteGroup( sessionid_t sid, groupid_t gid )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    sql = "DELETE FROM " + dbprefix + "_vpaccount_groups ";
    sql += "WHERE gid = " + string( unsignedIntToString( gid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    return RES_OK;
}

/**
 * 
 * ?違???若?????脂??/span>
 * 
 * @param 
 * @return 
 * 
 */
result_t insertGroup( sessionid_t sid, const group_t* group )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    sql = "INSERT INTO " + dbprefix + "_vpaccount_groups ( gname, gdesc ) VALUES (";
    sql += "'" + string( addSlashes( group -> getGname( ) ) ) + "', ";
    sql += "'" + string( addSlashes( group -> getDesc( ) ) ) + "' )";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    return RES_OK;
}

/**
 * 
 * ?違???若???????/span>
 * 
 * @param 
 * @return 
 * 
 */
result_t updateGroup( sessionid_t sid, const group_t* group )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    sql = "UPDATE " + dbprefix + "_vpaccount_groups SET ";
    sql += "gname='" + string( addSlashes( group -> getGname( ) ) ) + "', ";
    sql += "gdesc='" + string( addSlashes( group -> getDesc( ) ) ) + "' ";
    sql += "WHERE gid=" + string( unsignedIntToString( group -> getGID( ) ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    return RES_OK;
}

/**
 * 
 * ?違???若?????怨??
 * 
 * @param 
 * @return 
 * 
 */
result_t getGroup( sessionid_t sid, groupid_t gid, const group_t** group )
{
    int len;
    static criteria c;
    result_t res = getGroups( sid, &gid, 1, &c, group, &len );
    if( len == 0 ) return RES_NO_SUCH_GROUP;
    return res;
}

/**
 * 
 * ?違???若?????怨??
 * 
 * @param 
 * @return 
 * 
 */
result_t getGroups( sessionid_t sid, groupid_t* gids, int gidsLen, criteria_t* cri, const group_t** groups, int* groupsLen )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    group_t* dst = new group_t[ gidsLen ];
    
    sql += "SELECT gid, gname, gdesc ";
    sql += "FROM " + dbprefix + "_vpaccount_groups ";
    sql += "WHERE gid=" + string( unsignedIntToString( gids[ 0 ] ) );
    for( int i = 1; i < gidsLen; i++ ){
        sql += " OR gid=" + string( unsignedIntToString( gids[ i ] ) );
    }
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    result = mysql_use_result( mysql ) ;
    *groupsLen=0;
    for( int i = 0; ( row = mysql_fetch_row(result) ) != 0 && i < gidsLen ; i++ ){
        dst[ i ].setGID( atoi( row[ 0 ] ) );
        dst[ i ].setGname( row[ 1 ] );
        dst[ i ].setDesc( row[ 2 ] );
        ( *groupsLen )++;
    }
    mysql_free_result( result );
    *groups = dst;
    return RES_OK;
}

/**
 * 
 * ?≪?????若?炊┤???????
 * 
 * @param 
 * @return 
 * 
 */
bool isModerator( sessionid_t sid, userid_t uid )
{
    return RES_ERROR;
}

/**
 * 
 * ???若??D??緇?
 * 
 * @param uname ID????緇??????????若?吟?弱??
 * @param uid ID??篁ｅ?ャ??????紊??違?????ゃ?潟??/span>
 * @return RES_ERROR | RES_OK 
 * @refer result_t
 * 
 */
result_t getUid( const char* uname, userid_t* uid )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( uname == NULL ) return RES_ERROR;
    
    string sql;
    string uname2 = addSlashes( uname );
    sql = "SELECT uid FROM " + dbprefix + "_users WHERE uname='" + uname2 + "';";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    MYSQL_RES* result = mysql_store_result( mysql ) ;
    MYSQL_ROW row = mysql_fetch_row(result);
    if( row ){
        *uid = atoi( row[0] );
        mysql_free_result( result );
        return RES_OK;
    }else{
        mysql_free_result( result );
        return RES_NO_SUCH_USER;
    }
}

/**
 * 
 * ?祉???激?с?潟??篏?????xoops_vpaccount_session???吾??莨若???? sessionid_t??session???????
 * 
 * @param uid xoops_users??id
 * @param remoteHost remote ip (host order)
 * @param session sessionid_t???????????????????ゃ?潟?帥??
 * @return RES_OK ????
 * @return RES_DB_QUERY_ERROR DB????????筝?????????/span>
 */
static result_t addSession( userid_t uid, unsigned long remoteHost, sessionid_t* session )
{
    result_t ret;
    string sql = "INSERT INTO " + dbprefix + "_vpaccount_session (uid,remote_host) values (" + 
      unsignedIntToString(uid) + "," + unsignedIntToString((unsigned int)remoteHost) + ")";
    if ( 0 == mysql_query( mysql, sql.c_str() ) ){
        *session = (int)mysql_insert_id(mysql);
        ret = RES_OK;
    }
    else {
        ret = RES_DB_QUERY_ERROR;
    }
    return ret;
}


/**
 * 
 * ???違?ゃ?活?荐若???祉???激?с?割???
 * 
 * @param uname ???違?ゃ?喝??
 * @param passwd ???鴻???若??
 * @param session sessionid_t???????????????????ゃ?潟?帥??
 * @return RES_OK ???違?ゃ?恰??????session??essionid_t???吾??莨若??????
 * @return RES_LOGIN_FAILURE uname?障????asswd???医幻
 * @return RES_DB_QUERY_ERROR DB????????筝?????????/span>
 * 
 */
result_t loginUser(const char* uname, const char* passwd, sessionid_t* session )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    
    result_t ret;
    string sql;
    
    // uname, passwd -> uid
    string escUname = addSlashes( uname );
    string escPasswd = addSlashes( passwd );
    sql = "SELECT uid FROM " + dbprefix + "_users WHERE uname='" + escUname + "' and pass=md5('" + escPasswd + "')";
    if( 0 == mysql_query( mysql, sql.c_str( ) ) ){
        MYSQL_RES* result = mysql_store_result( mysql );
        if( result ){
            MYSQL_ROW row = mysql_fetch_row(result);
            if( row ){
                userid_t uid = atoi(row[0]);
                ret = addSession( uid, 0, session );
            }else{
                ret = RES_LOGIN_FAILURE;
            }
            mysql_free_result( result );
        }else {
            ret = RES_DB_QUERY_ERROR;
        }
    }else{
        ret = RES_DB_QUERY_ERROR;
    }
    
    return ret;
}

/**
 * 
 * ???違?≪???????祉???激?с?括?篋?
 * 
 * @param sid session id
 * @return ????
 * 
 */
void logoutUser( sessionid_t sid )
{
    result_t ret;
    string sql;
    
    sql = "DELETE FROM " + dbprefix + "_vpaccount_session WHERE sid=" + intToString((int)sid);
    if ( 0 == mysql_query( mysql, sql.c_str() ) ){
        if ( mysql_affected_rows(mysql) == 1 ){
            // ???違?≪????????
        }
        else {
            // sid???≦??/span>
        }
    }
    else {
        // DB????????筝?????????/span>
    }
}

/**
 * 
 * ?祉???激?с?潟?????.<br>
 * XOOPS??ession???若????????蚊??????sess_id?????essionid??膈???????
 * ?逸?session_t??篏?????????
 * ???若?帥???若?鴻???祉???激?с?潟????違?????宴??荐??蚊????
 * 
 * @param sessionid xoops??ession_id
 * @param uid  xoops_users??id
 * @param remoteHost remote ip (host order)
 * @param session sessionid_t???????????????????ゃ?潟?帥??
 * @return RES_OK
 * @return RES_ERROR
 * @return RES_DB_QUERY_ERROR
 *
 */
result_t createSession( const char* sessionid, userid_t uid, unsigned long remoteHost, sessionid_t* session )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    
    result_t ret;
    string sql;
    
    string escSessionid = addSlashes(sessionid);
    sql = "SELECT sess_id from " + dbprefix + "_session where sess_id='" + escSessionid + "'";
    if( 0 == mysql_query( mysql, sql.c_str( ) ) ){
        MYSQL_RES* result = mysql_store_result( mysql );
        if( result ){
            MYSQL_ROW row = mysql_fetch_row(result);
            if( row ){
                ret = addSession( uid, remoteHost, session );
            }else{
                ret = RES_ERROR;
            }
            mysql_free_result( result );
        }else {
            ret = RES_DB_QUERY_ERROR;
        }
    }else{
        ret = RES_DB_QUERY_ERROR;
    }
    
    return ret;
}

/**
 * 
 * ?祉???激?с?潟???膣違??session_t?у??????.<br>
 * 
 * @param sess_id
 * @param session
 * @return 
 *
 */
result_t getSession( sessionid_t sess_id, const session_t** ppsession )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    
    result_t ret;
    string sql;
    
    sql = "SELECT sid, uid, unix_timestamp(timestamp), remote_host from " + dbprefix + 
      "_vpaccount_session where sid=" + unsignedIntToString((unsigned int)sess_id);
    if( 0 == mysql_query( mysql, sql.c_str( ) ) ){
        MYSQL_RES* result = mysql_store_result( mysql );
        if( result ){
            MYSQL_ROW row = mysql_fetch_row(result);
            if( row ){
                session_t *p = new session[1];
                p->setSessionID(sess_id);
                p->setUserID(atoi(row[1]));
                p->setDate(atoi(row[2]));
                p->setRemoteHost(atoi(row[3]));
                *ppsession = p;
                ret = RES_OK;
            }else{
                ret = RES_NO_SUCH_SESSION;
            }
            mysql_free_result( result );
        }else {
            ret = RES_DB_QUERY_ERROR;
        }
    }else{
        ret = RES_DB_QUERY_ERROR;
    }
    
    return ret;
}

/**
 * 
 * ?祉???激?с?潟???綵??с?????с????????.
 * 
 * @param sid ???с??????????session
 * @return true 罩ｅ?
 * @return false 筝?罩?/span>
 *
 */
bool isValidSessionID( sessionid_t sid )
{
    if( mysql == NULL ) return false;
    
    string sql;
    string sidstr;
    char buf[ 12 ];
    snprintf( buf, 12, "%d", sid );
    
    sql = "SELECT * FROM " + dbprefix + "_vpaccount_session WHERE sid=" + string( buf );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        return false;
    }
    MYSQL_RES* result = mysql_store_result( mysql ) ;
    MYSQL_ROW row = mysql_fetch_row(result);
    if( row ){
        return true;
    }else{
        return false;
    }
    mysql_free_result( result );
}

void freeResult( const account_t* ptr ){ delete[] ( account_t* )ptr; }
void freeResult( const group_t* ptr ){ delete[] ( group_t* )ptr; }
void freeResult( const session_t* ptr ){ delete[] ( session_t* )ptr; }
void freeResult( const unsigned int* ptr ){ delete[] ( unsigned int* )ptr; }

static string errstr;
const char* getLastErrorString()
{
    return errstr.c_str( );
}

void setLastErrorString( const char* str )
{
    errstr = str;
}