xoonips/AL/commonal.cc

/*
 * 
 * $Revision: 1.24 $
 * $Log: commonal.cc,v $
 * Revision 1.24  2004/12/06 01:45:50  aga
 * ?祉?潟?＜?潟???ゃ??.
 * ?脂???上???篆??.
 *
 * Revision 1.23  2004/12/04 09:21:10  aga
 * ??p_config ?? vpaccount_config.
 *
 * Revision 1.22  2004/12/03 07:17:21  youi
 * isModerator?с?≪???祉?鴻???????若?帥???若?鴻???若????????篆??.
 *
 * Revision 1.21  2004/12/01 10:28:58  youi
 * DB????????????眼??軸??篆??
 *     institute -> division
 *     organizaion -> company_name
 *
 * Revision 1.20  2004/12/01 04:37:04  youi
 * freeResult: unsigned int* ?? int* ?娯信罩?
 * ?潟?＜?潟???????∽?違???????菴処?.
 *
 * Revision 1.19  2004/11/30 06:40:11  youi
 * ?∽?違??菴遵??(gidExists, uidExists)
 * getGroupCount??絎?臂?
 * getGroupsByUid??絎?臂?
 * isGroupAdmin??篆??.
 * dumpGroupAdmins??絎?臂?
 * deleteMember??絎?臂?
 * insertMember??絎?臂?
 * getMembers??絎?臂?
 * isModerator??絎?臂?
 *
 * Revision 1.18  2004/11/30 05:46:32  aga
 * ??ession????remoteHost??????
 *
 * Revision 1.17  2004/11/27 09:35:49  youi
 * isActivated??絎?臂?
 * activate??絎?臂?
 * dumpUid??絎?臂?
 *
 * Revision 1.16  2004/11/27 06:29:29  youi
 * getAccountCount??絎?臂?
 * dumpGids??絎?臂?
 * insertGroup, deleteGroup, updateGroup??絎?臂?
 * getGroup, getGroups??絎?臂?
 * ???若?帥???若?劫?????????弱?冴?????鐚?RES_DB_NOT_INITIALIZED??菴????????????∽?違??申??
 * (???綽????∽?違??罧??ｃ??????)
 *
 * Revision 1.15  2004/11/27 02:22:22  aga
 * ??nitializeDB????ddSlashes()???若?吟???純?＜??????篆??.
 *
 * Revision 1.14  2004/11/27 01:07:31  youi
 * criteria2str: LIMIT??RDER BY?????????ャ???帥????.
 *
 * Revision 1.13  2004/11/27 00:35:39  youi
 * getAccounts??絎?臂?
 * getAccount??篆??鐚???????etAccounts???若?喝?冴??.
 * criteria2str??絎?臂?
 *
 * Revision 1.12  2004/11/26 09:45:28  youi
 * getAccount??絎?臂?
 *
 * Revision 1.11  2004/11/26 08:16:26  aga
 * ??etSession, loginUser, createSession, freeResult(const session_t*) 篆??.
 *
 * Revision 1.10  2004/11/26 07:57:42  youi
 * updateAccount, deleteAccount??絎?臂?
 * mysql_query紊掩??????tderr?吾?????若?潟?若?????????若?＜???祉?若?吾???阪??.
 *
 * Revision 1.9  2004/11/26 07:38:02  aga
 * ??AILUE -> FAILURE.
 *
 * Revision 1.8  2004/11/26 06:36:55  aga
 * ??reateSession, getSession ??篏???.
 *
 * Revision 1.7  2004/11/26 04:51:47  youi
 * dbprefix??絎?臂?????.
 * insertAccount??絎?臂?????.
 * isValidSessionID??絎?臂?????.
 *
 * Revision 1.6  2004/11/26 04:35:55  aga
 * ??oginUser(), logoutUser()??篏???.
 *
 * Revision 1.5  2004/11/26 01:08:25  aga
 * ??ddSlashes()篏???.
 *
 * Revision 1.4  2004/11/25 12:14:29  youi
 * getUid????????絎?臂?????.
 *
 * Revision 1.3  2004/11/25 11:13:59  youi
 * getLastErrorString/setLastErrorString??絎?臂?
 *
 * Revision 1.2  2004/11/25 08:55:19  youi
 * 綣??違??????篆??.
 * freeResult??菴遵??.
 *
 * Revision 1.1  2004/11/25 05:14:58  youi
 * initial version
 *
 * 
 */
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <mysql.h>
#include <errmsg.h>
#include <string>
using namespace std;

#include "common.h"
#include "account.h"
#include "group.h"
#include "session.h"
#include "criteria.h"
#include "commonal.h"


static MYSQL* mysql = NULL; //!< MySQL????潟????/span>
static string dbprefix; //!< XOOPS???若?帥???若?鴻???若??????REFIX

/** 
 * 
 * php??ddslashes????????
 * 
 * @param addslashes???鴻????絖?????NULL??絎?筝?????
 * @return addslashes????????絖???
 */
string addSlashes( const char *str )
{
        if ( mysql == NULL ){
                string s;
                return s;
        }
        int len = strlen(str);
        char *buf = new char[len*2+1];
        int bufLen = mysql_real_escape_string( mysql, buf, str, len );
        string s( buf, bufLen );
        return s;
}

/**
 * 
 * gid??????????с????
 * DB???≪???祉?劫け????????false??????鐚?/span>
 * 
 * @param gid ???с??????????GID
 * @return true 絖???????
 * @return false 絖?????????
 * 
 */
static bool gidExists( groupid_t gid )
{
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    
    sql = "SELECT * FROM " + dbprefix + "_vpaccount_groups ";
    sql += "WHERE gid=" + string( unsignedIntToString( gid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return false;
    }
    result = mysql_store_result( mysql ) ;
    if( !mysql_fetch_row(result) ){
        mysql_free_result( result );
        return false;
    }
    mysql_free_result( result );
    return true;
}

    
/**
 * 
 * Platform???若?倶???宴??id??絖??????????????с????
 * DB???≪???祉?劫け????????false??????鐚?/span>
 * 
 * @param uid ???с??????????UID
 * @return true 絖???????
 * @return false 絖?????????
 * 
 */
static bool uidExists( userid_t uid )
{
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    
    sql = "SELECT * FROM " + dbprefix + "_vpaccount_users ";
    sql += "WHERE uid=" + string( unsignedIntToString( uid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return false;
    }
    result = mysql_store_result( mysql ) ;
    if( !mysql_fetch_row(result) ){
        mysql_free_result( result );
        return false;
    }
    mysql_free_result( result );
    return true;
}

    
/**
 * 
 * criteria ?? SQL?????????
 * 
 * 
 * 
 */
string criteria2str( criteria* cri )
{
    string sql;
    
    const orderby* odrby = cri -> headOrderBy( );
    if( odrby != 0 ){
        sql += " ORDER BY " + string( odrby -> getColumn( ) );
        sql += ( odrby -> getOrder( ) == orderby::DESC ) ? " DESC" : " ";
        while( ( odrby = cri -> nextOrderBy( ) ) != 0 ){
            sql += ", " + string( odrby -> getColumn( ) );
            sql += ( odrby -> getOrder( ) == orderby::DESC ) ? " DESC" : " ";
        }
    }

    if( cri -> getLimitStart( ) != 0 || cri -> getLimitRows( ) != 0 ){
        sql += " LIMIT " + string( intToString( cri -> getLimitStart( ) ) )
            + ", " + string( intToString( cri -> getLimitRows( ) ) );
    }
    return sql;
}

/**
 * 
 * ???若?帥???若?鴻????????
 * 
 * @param host ???若?帥???若?鴻?????鴻????
 * @param user ???若?帥???若?鴻???≪???祉?鴻???????若?九??
 * @param password 筝?荐????若?吟?????鴻???若??
 * @param dbname ???若?帥???若?鴻??????
 * @param prefix XOOPS???若?帥???若?鴻???若??????REFIX
 * @return result_t
 * @refer result_t
 */
result_t initializeDB( const char* host, const char* user, const char* password, const char* dbname, const char* prefix )
{
    // ?≪??･膓?筝???????筝???????/span>
    if ( mysql != NULL )
        mysql_close( mysql );
    
    dbprefix = prefix;
    
    // ????????･膓?
    mysql = mysql_init(NULL);
    if ( mysql == NULL ){
        return RES_DB_INITIALIZE_ERROR;
    }
    char *unix_socket = NULL; // ?
    uint flag = 0;       // ?
    if ( NULL == mysql_real_connect( mysql, host, user, password, dbname, 3306, unix_socket, flag ) ){
        return RES_DB_CONNECT_ERROR;
    }
    
    return RES_OK;
}


/**
 * 
 * Platform???若?倶?粋??倶????緇?
 * 
 * @param 
 * @return 
 * 
 */
bool isActivated( sessionid_t sid, userid_t uid )
{
    if( mysql == NULL ) return false;
    if( !isValidSessionID( sid ) ) return false;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    
    sql = "SELECT * FROM " + dbprefix + "_vpaccount_users ";
    sql += "WHERE activate=1 and uid=" + string( unsignedIntToString( uid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return false;
    }
    result = mysql_store_result( mysql ) ;
    if( row = mysql_fetch_row(result) ){
        mysql_free_result( result );
        return true;
    }
    return false;
}

/**
 * 
 * Platform???若?倶?粋??倶??紊???/span>
 * 
 * @param 
 * @return 
 * 
 */
result_t activate( sessionid_t sid, userid_t uid, bool activate )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    
    sql = "UPDATE " + dbprefix + "_vpaccount_users ";
    sql += "SET activate=" + string( activate ? "1" : "0" );
    sql += " WHERE uid=" + string( unsignedIntToString( uid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    if ( mysql_affected_rows(mysql) == 0 ){
        // ?贋?医け??
        return RES_NO_SUCH_USER;
    }
    return RES_OK;
}

/**
 * 
 * ?≪?????潟????/span>
 * 
 * @param 
 * @return 
 * 
 */
int getAccountCount( sessionid_t sid )
{
    if( mysql == NULL ) return 0;
    if( !isValidSessionID( sid ) ) return 0;
    
    int ret = 0;
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    
    //?≪?????潟???違??羆?????
    sql = "SELECT COUNT(*) FROM " + dbprefix + "_vpaccount_users ";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return 0;
    }
    result = mysql_store_result( mysql ) ;
    if( row = mysql_fetch_row(result) ){
        ret = atoi( row[ 0 ] );
    }else{
        mysql_free_result( result );
        return 0;
    }
    mysql_free_result( result );
    return ret;
}

/**
 * 
 * ?≪?????潟??????/span>
 * 
 * @param 
 * @return RES_OK
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t deleteAccount( sessionid_t sid, userid_t uid )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    sql = "DELETE FROM " + dbprefix + "_users ";
    sql += "WHERE uid = " + string( unsignedIntToString( uid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    sql = "DELETE FROM " + dbprefix + "_vpaccount_users ";
    sql += "WHERE uid = " + string( unsignedIntToString( uid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    return RES_OK;
}

/**
 * 
 * ?≪?????潟?????怨??
 * 
 * @param sid ?祉???激?с??D
 * @param uid ??緇??????????若?吟??ID
 * @param acc ??緇??????≪?????潟??????account_t)?????ゃ?潟?帥???吾??莨若??綣???/span>
 * @return RES_OK
 * @return RES_NO_SUCH_USER
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * @return RES_ERROR
 * 
 */
result_t getAccount( sessionid_t sid, userid_t uid, const account_t** acc )
{
    int len;
    static criteria c;
    result_t res = getAccounts( sid, &uid, 1, &c, acc, &len );
    if( len == 0 ) return RES_NO_SUCH_USER;
    return res;
}

/**
 * 
 * ?≪?????潟?????怨??
 * 
 * @param sid ?祉???激?с??D
 * @param uids ??緇??????????若?吟??ID??????
 * @param uidsLen uids???????膣???/span>
 * @param cri 腟???????我??絎?鐚??純?若???＞散??絎?
 * @param accounts 罎?膣∝??????????????ゃ?潟?帥???吾??莨若??綣???/span>
 * @param accountsLen 罎?膣∝???????????*accounts???膣???
 * @return RES_OK| RES_DB_NOT_INITIALIZED| RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t getAccounts( sessionid_t sid, const userid_t* uids, int uidsLen, criteria_t* cri, const account_t** accounts, int* accountsLen )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    account_t* dst = new account_t[ uidsLen ];
    
    sql += "SELECT u1.uid, u1.name, u1.uname, u1.email, u1.url, u1.user_avatar, u1.user_regdate, u1.user_icq, u1.user_from, u1.user_sig, u1.user_viewemail, u1.actkey, u1.user_aim, u1.user_yim, u1.user_msnm, u1.pass, u1.posts, u1.attachsig, u1.rank, u1.level, u1.theme, u1.timezone_offset, u1.last_login, u1.umode, u1.uorder, u1.notify_method, u1.notify_mode, u1.user_occ, u1.bio, u1.user_intrest, u1.user_mailok, u2.activate, u2.address, u2.division, u2.tel, u2.company_name, u2.country, u2.zipcode, u2.fax, u2.base_url, u2.notice_mail, u2.notice_mail_since ";
    sql += "FROM " + dbprefix + "_users AS u1, " + dbprefix + "_vpaccount_users AS u2 ";
    sql += "WHERE u1.uid = u2.uid AND ( u1.uid=" + string( unsignedIntToString( uids[ 0 ] ) );
    for( int i = 1; i < uidsLen; i++ ){
        sql += " OR u1.uid=" + string( unsignedIntToString( uids[ i ] ) );
    }
    sql += " ) ";
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    result = mysql_use_result( mysql ) ;
    *accountsLen=0;
    for( int i = 0; ( row = mysql_fetch_row(result) ) != 0 && i < uidsLen ; i++ ){
        dst[ i ].setUID( atoi( row[ 0 ] ) );
        dst[ i ].setName( row[ 1 ] );
        dst[ i ].setUname( row[ 2 ] );
        dst[ i ].setEmail( row[ 3 ] );
        dst[ i ].setURL( row[ 4 ] );
        dst[ i ].setUserAvatar( row[ 5 ] );
        dst[ i ].setUserRegdate( atoi( row[ 6 ] ) );
        dst[ i ].setUserIcq( row[ 7 ] );
        dst[ i ].setUserFrom( row[ 8 ] );
        dst[ i ].setUserSig( row[ 9 ] );
        dst[ i ].setUserViewemail( atoi( row[ 10 ] ) );
        dst[ i ].setActkey( row[ 11 ] );
        dst[ i ].setUserAim( row[ 12 ] );
        dst[ i ].setUserYim( row[ 13 ] );
        dst[ i ].setUserMsnm( row[ 14 ] );
        dst[ i ].setPass( row[ 15 ] );
        dst[ i ].setPosts( atoi( row[ 16 ] ) );
        dst[ i ].setAttachsig( atoi( row[ 17 ] ) );
        dst[ i ].setRank( atoi( row[ 18 ] ) );
        dst[ i ].setLevel( atoi( row[ 19 ] ) );
        dst[ i ].setTheme( row[ 20 ] );
        dst[ i ].setTimezoneOffset( atof( row[ 21 ] ) );
        dst[ i ].setLastLogin( atoi( row[ 22 ] ) );
        dst[ i ].setUmode( row[ 23 ] );
        dst[ i ].setUorder( atoi( row[ 24 ] ) );
        dst[ i ].setNotifyMethod( atoi( row[ 25 ] ) );
        dst[ i ].setNotifyMode( atoi( row[ 26 ] ) );
        dst[ i ].setUserOcc( row[ 27 ] );
        dst[ i ].setBio( row[ 28 ] );
        dst[ i ].setUserIntrest( row[ 29 ] );
        dst[ i ].setUserMailok( atoi( row[ 30 ] ) );
        dst[ i ].setActivate( atoi( row[ 31 ] ) );
        dst[ i ].setAddress( row[ 32 ] );
        dst[ i ].setDivision( row[ 33 ] );
        dst[ i ].setTel( row[ 34 ] );
        dst[ i ].setCompanyName( row[ 35 ] );
        dst[ i ].setCountry( row[ 36 ] );
        dst[ i ].setZipcode( row[ 37 ] );
        dst[ i ].setFax( row[ 38 ] );
        dst[ i ].setBaseURL( row[ 39 ] );
        dst[ i ].setNoticeMail( atoi( row[ 40 ] ) );
        dst[ i ].setNoticeMailSince( atoi( row[ 41 ] ) );
        ( *accountsLen )++;
    }
    mysql_free_result( result );
    *accounts = dst;
    return RES_OK;
}

/**
 * 
 * ?≪?????潟???脂??
 * ???若?倶???宴?????若?帥???若?鴻???脂?蚊???障??鐚?/span>
 * ?脂?蚊???????若?倶???宴???綽????????若??D??uid???主????障??.
 * 
 * @param sid ?祉???激?с??/span>
 * @param account ?脂?蚊?????≪?????潟??????/span>
 * @param uid ?脂?蚊?????≪?????潟?????宴???綽????????若??D
 * @return RES_OK
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * @return RES_ERROR
 * 
 */
result_t insertAccount( sessionid_t sid, const account_t* account, userid_t* uid )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    string tmp;
    char buf[ 12 ];
    
    //xoops?????若?吟???若???????吾??莨若??
    sql = "INSERT INTO " + dbprefix + "_users (uname, name, email, url, user_avatar, user_regdate, user_icq, user_from, user_sig, user_viewemail, actkey, user_aim, user_yim, user_msnm, pass, posts, attachsig, rank, level, theme, timezone_offset, last_login, umode, uorder, notify_method, notify_mode, user_occ, bio, user_intrest, user_mailok) VALUES (";
    sql += "'" + string( addSlashes( account -> getUname( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getName( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getEmail( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getURL( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserAvatar( ) ) ) + "', ";
    snprintf( buf, 12, "%d", time( NULL ) );
    sql += string( buf ) + ", ";
    sql += "'" + string( addSlashes( account -> getUserIcq( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserFrom( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserSig( ) ) ) + "', ";
    snprintf( buf, 12, "%d", account -> getUserViewemail( ) );
    sql += string( buf ) + ", ";
    sql += "'" + string( addSlashes( account -> getActkey( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserAim( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserYim( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserMsnm( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getPass( ) ) ) + "', ";
    snprintf( buf, 12, "%d", account -> getPosts( ) );
    sql += string( buf ) + ", ";
    snprintf( buf, 12, "%d", account -> getAttachsig( ) );
    sql += string( buf ) + ", ";
    snprintf( buf, 12, "%d", account -> getRank( ) );
    sql += string( buf ) + ", ";
    snprintf( buf, 12, "%d", account -> getLevel( ) );
    sql += string( buf ) + ", ";
    sql += "'" + string( addSlashes( account -> getTheme( ) ) ) + "', ";
    snprintf( buf, 12, "%lf", account -> getTimezoneOffset( ) );
    sql += string( buf ) + ", ";
    sql += "0, "; //last login
    sql += "'" + string( addSlashes( account -> getUmode( ) ) ) + "', ";
    snprintf( buf, 12, "%d", account -> getUorder( ) );
    sql += string( buf ) + ", ";
    snprintf( buf, 12, "%d", account -> getNotifyMethod( ) );
    sql += string( buf ) + ", ";
    snprintf( buf, 12, "%d", account -> getNotifyMode( ) );
    sql += string( buf ) + ", ";
    sql += "'" + string( addSlashes( account -> getUserOcc( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getBio( ) ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getUserIntrest( ) ) ) + "', ";
    snprintf( buf, 12, "%d", account -> getUserMailok( ) );
    sql += string( buf ) + ")";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    //???若??D????緇?????
    *uid = mysql_insert_id( mysql );
    
    //vpaccount?????若?吟???若??????????????宴???吾??莨若??
    sql = "INSERT INTO " + dbprefix + "_vpaccount_users (uid, activate, address, division, tel, company_name, country, zipcode, fax, base_url, notice_mail, notice_mail_since) VALUES (";
    snprintf( buf, 12, "%d", *uid );
    sql += string( buf ) + ", ";
    if( account -> getActivate() ){
        sql += "1, ";
    }else{
        sql += "0, ";
    }
    sql += "'" + string( addSlashes( account -> getAddress() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getDivision() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getTel() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getCompanyName() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getCountry() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getZipcode() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getFax() ) ) + "', ";
    sql += "'" + string( addSlashes( account -> getBaseURL() ) ) + "', ";
    snprintf( buf, 12, "%d", account -> getNoticeMail( ) );
    sql += string( buf ) + ", ";
    snprintf( buf, 12, "%d", account -> getNoticeMailSince( ) );
    sql += string( buf ) + ")";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        //xoops_users??nsert???????潟?若???????ゃ????
        sql = "DELETE FROM " + dbprefix + "_users where uid=";
        snprintf( buf, 12, "%d", *uid );
        sql += string( buf );
        mysql_query( mysql, sql.c_str( ) );
        return RES_DB_QUERY_ERROR;
    }
    
    return RES_OK;
}

/**
 * 
 * ?≪?????潟?????宴??紊??眼????.
 * 
 * 
 * @param sid ?祉???激?с??D
 * @param account 紊??眼???????≪?????潟??????/span>
 * @return RES_OK
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * @return RES_NO_SUCH_USER
 * 
 */
result_t updateAccount( sessionid_t sid, const account_t* account )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( account == NULL ) return RES_ERROR;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !uidExists( account -> getUID( ) ) ) return RES_NO_SUCH_USER;
    
    string sql;
    string tmp;
    char buf[ 12 ];
    
    //xoops?????若?吟???若???????吾??莨若??
    sql = "UPDATE " + dbprefix + "_users SET ";
    sql += "uname='" + string( addSlashes( account -> getUname( ) ) ) + "', ";
    sql += "name='" + string( addSlashes( account -> getName( ) ) ) + "', ";
    sql += "email='" + string( addSlashes( account -> getEmail( ) ) ) + "', ";
    sql += "url='" + string( addSlashes( account -> getURL( ) ) ) + "', ";
    sql += "user_avatar='" + string( addSlashes( account -> getUserAvatar( ) ) ) + "', ";
    sql += "user_regdate=" + string( intToString( account -> getUserRegdate( ) ) ) + ", ";
    sql += "user_icq='" + string( addSlashes( account -> getUserIcq( ) ) ) + "', ";
    sql += "user_from='" + string( addSlashes( account -> getUserFrom( ) ) ) + "', ";
    sql += "user_sig='" + string( addSlashes( account -> getUserSig( ) ) ) + "', ";
    sql += "user_viewemail=" + string( intToString( account -> getUserViewemail( ) ) ) + ", ";
    sql += "actkey='" + string( addSlashes( account -> getActkey( ) ) ) + "', ";
    sql += "user_aim='" + string( addSlashes( account -> getUserAim( ) ) ) + "', ";
    sql += "user_yim='" + string( addSlashes( account -> getUserYim( ) ) ) + "', ";
    sql += "user_msnm='" + string( addSlashes( account -> getUserMsnm( ) ) ) + "', ";
    sql += "pass='" + string( account -> getPass( ) ) + "', ";
    sql += "posts=" + string( intToString( account -> getPosts( ) ) ) + ", ";
    sql += "attachsig=" + string( intToString( account -> getAttachsig( ) ) ) + ", ";
    sql += "rank=" + string( intToString( account -> getRank( ) ) ) + ", ";
    sql += "level=" + string( intToString( account -> getLevel( ) ) ) + ", ";
    sql += "theme='" + string( addSlashes( account -> getTheme( ) ) ) + "', ";
    snprintf( buf, 12, "%.2f", account -> getTimezoneOffset( ) );
    sql += "timezone_offset=" + string( buf ) + ", ";
    sql += "last_login=" + string( unsignedIntToString( account -> getLastLogin( ) ) ) + ", ";
    sql += "umode='" + string( account -> getUmode( ) ) + "', ";
    sql += "uorder=" + string( intToString( account -> getUorder( ) ) ) + ", ";
    sql += "notify_method=" + string( intToString( account -> getNotifyMethod( ) ) ) + ", ";
    sql += "notify_mode=" + string( intToString( account -> getNotifyMode( ) ) ) + ", ";
    sql += "user_occ='" + string( addSlashes( account -> getUserOcc( ) ) ) + "', ";
    sql += "bio='" + string( addSlashes( account -> getBio( ) ) ) + "', ";
    sql += "user_intrest='" + string( addSlashes( account -> getUserIntrest( ) ) ) + "', ";
    sql += "user_mailok=" + string( intToString( account -> getUserMailok( ) ) );
    sql += " WHERE uid = " + string( intToString( account -> getUID( ) ) );
    
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    //vpaccount?????若?吟???若??????????????宴??筝??吾??????
    sql = "UPDATE " + dbprefix + "_vpaccount_users SET ";
    sql += "activate=";
    if( account -> getActivate() ){
        sql += "1, ";
    }else{
        sql += "0, ";
    }
    sql += "address='" + string( addSlashes( account -> getAddress() ) ) + "', ";
    sql += "division='" + string( addSlashes( account -> getDivision() ) ) + "', ";
    sql += "tel='" + string( addSlashes( account -> getTel() ) ) + "', ";
    sql += "company_name='" + string( addSlashes( account -> getCompanyName() ) ) + "', ";
    sql += "country='" + string( addSlashes( account -> getCountry() ) ) + "', ";
    sql += "zipcode='" + string( addSlashes( account -> getZipcode() ) ) + "', ";
    sql += "fax='" + string( addSlashes( account -> getFax() ) ) + "', ";
    sql += "base_url='" + string( addSlashes( account -> getBaseURL() ) ) + "', ";
    sql += "notice_mail=" + string( intToString( account -> getNoticeMail( ) ) ) + ", ";
    sql += "notice_mail_since=" + string( intToString( account -> getNoticeMailSince( ) ) );
    sql += " WHERE uid = " + string( intToString( account -> getUID( ) ) );
    
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    return RES_OK;
}

/**
 * 
 * criteria_t?ф??絎???????膀??蚊?????若??D??菴???.
 * ???若??D????????腆坂????????????吾??莨若?随????????≪?????鴻??*uids???吾??莨若??.
 * ???????泣?ゃ?冴??*uidsLen???吾??莨若??
 * 
 * @param sid ?祉???激?с??D
 * @param cri 腟???????我??絎?鐚??純?若???＞散??絎?
 * @param uids ???若?吟??ID??????
 * @param uidsLen uids???????膣???/span>
 * @return RES_OK| RES_DB_NOT_INITIALIZED| RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR| RES_ERROR
 * 
 */
result_t dumpUids( sessionid_t sid, criteria_t* cri, userid_t** uids, int* uidsLen )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    userid_t* dst = 0;
    
    sql = "SELECT uid FROM " + dbprefix + "_vpaccount_users ";
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    result = mysql_store_result( mysql ) ;
    if( result == NULL ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    *uidsLen = mysql_num_rows( result );
    dst = new userid_t[ *uidsLen ];
    for( int i = 0; ( row = mysql_fetch_row(result) ) != 0 && i < *uidsLen ; i++ ){
        dst[ i ] = atoi( row[ 0 ] );
    }
    mysql_free_result( result );
    *uids = dst;
    
    return RES_OK;
}

/**
 * 
 * ?違???若???違??菴???.
 * 筝?罩ｃ???祉???激?с??D????0??菴???.
 * 
 * @param sid ?祉???激?с??D
 * @return ?違???若????/span>
 * 
 */
int getGroupCount( sessionid_t sid )
{
    if( mysql == NULL ) return 0;
    if( !isValidSessionID( sid ) ) return 0;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    int groupLen = 0;
    
    //?違???若???違??羆?????
    sql = "SELECT COUNT(*) FROM " + dbprefix + "_vpaccount_groups";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    result = mysql_store_result( mysql ) ;
    if( row = mysql_fetch_row(result) ){
        groupLen = atoi( row[ 0 ] );
    }
    mysql_free_result( result );
    return groupLen;
}

/**
 * 
 * ??絮??違???若??筝?荀у??
 * 
 * @param 
 * @return 
 * 
 */
result_t getGroupsByUid( sessionid_t sid, userid_t uid, criteria_t* cri, groupid_t** gids, int* gidsLen )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !uidExists( uid ) ) return RES_NO_SUCH_USER; //uid??????????с????/span>
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    groupid_t* dst = 0;
    int len = 0;
    
    //??絮??????違???若??????紊у???違??羆?????
    sql = "SELECT count(*) FROM " + dbprefix + "_vpaccount_groups_users_link";
    sql += " WHERE uid=" + string( unsignedIntToString( uid ) );
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    result = mysql_store_result( mysql ) ;
    if( row = mysql_fetch_row(result) ){
        len = atoi( row[ 0 ] );
    }
    mysql_free_result( result );
    
    sql = "SELECT gid, uid, is_admin FROM " + dbprefix + "_vpaccount_groups_users_link";
    sql += " WHERE uid=" + string( unsignedIntToString( uid ) );
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    *gidsLen = 0;
    dst = new groupid_t[ len ];
    result = mysql_store_result( mysql ) ;
    for( int i = 0; ( row = mysql_fetch_row(result) ) != 0 && i < len ; i++ ){
        dst[ i ] = atoi( row[ 0 ] );
        ( *gidsLen )++;
    }
    mysql_free_result( result );
    *gids = dst;
    
    return RES_OK;
}

/**
 * 
 * ?違???若??膊∞??罔????????
 * 
 * @param 
 * @return 
 * 
 */
bool isGroupAdmin( sessionid_t sid, groupid_t gid, userid_t uid )
{
    if( mysql == NULL ) return false;
    if( !isValidSessionID( sid ) ) return false;
    if( !uidExists( uid ) ) return false;
    if( !gidExists( gid ) ) return false;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    groupid_t* dst = 0;
    result_t res;
    
    sql = "SELECT * FROM " + dbprefix + "_vpaccount_groups_users_link ";
    sql += "WHERE gid=" + string( unsignedIntToString( gid ) );
    sql += " AND uid=" + string( unsignedIntToString( uid ) );
    sql += " AND is_admin=1";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return false;
    }
    result = mysql_store_result( mysql );
    if( !mysql_fetch_row(result) ){
        mysql_free_result( result );
        return false;
    }
    
    mysql_free_result( result );
    return true;;
}

/**
 * 
 * ?違???若??ID筝?荀?/span>
 * 
 * @param 
 * @return 
 * 
 */
result_t dumpGids( sessionid_t sid, criteria_t* cri, groupid_t** gids, int* gidsLen )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    groupid_t* dst = 0;
    
    sql = "SELECT gid FROM " + dbprefix + "_vpaccount_groups ";
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    result = mysql_store_result( mysql ) ;
    if( result == NULL ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    *gidsLen = mysql_num_rows( result );
    dst = new groupid_t[ *gidsLen ];
    for( int i = 0; ( row = mysql_fetch_row(result) ) != 0 && i < *gidsLen ; i++ ){
        dst[ i ] = atoi( row[ 0 ] );
    }
    mysql_free_result( result );
    *gids = dst;
    
    return RES_OK;
/*
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    groupid_t* dst = 0;
    
    //?違???若???違??羆?????
    sql = "SELECT COUNT(*) FROM " + dbprefix + "_vpaccount_groups ";
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    result = mysql_store_result( mysql ) ;
    if( row = mysql_fetch_row(result) ){
        *gidsLen = atoi( row[ 0 ] );
        dst = new groupid_t[ *gidsLen ];
    }else{
        mysql_free_result( result );
        return RES_ERROR;
    }
    mysql_free_result( result );
    
    sql = "SELECT gid, gname, gdesc FROM " + dbprefix + "_vpaccount_groups ";
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    result = mysql_use_result( mysql ) ;
    for( int i = 0; ( row = mysql_fetch_row(result) ) != 0 && i < *gidsLen ; i++ ){
        dst[ i ] = atoi( row[ 0 ] );
    }
    mysql_free_result( result );
    *gids = dst;
    
    return RES_OK;
*/
}

/**
 * 
 * ?違???若??膊∞????ID????緇?????
 * 
 * @param sid ?祉???激?с??D
 * @param gid ???????????違???若????ID?ф??絎?????
 * @param cri 腟???????我??絎?鐚??純?若???＞散??絎?
 * @param uids 膊∞??????ID???????????????????ゃ?潟??/span>
 * @param uidsLen uids???????膣???/span>
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * @return RES_ERROR 
 * 
 */
result_t dumpGroupAdmins( sessionid_t sid, groupid_t gid, criteria_t* cri, userid_t** uids, int* uidsLen )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    userid_t* dst = 0;
    
    sql = "SELECT uid FROM " + dbprefix + "_vpaccount_groups_users_link ";
    sql += " WHERE is_admin=1";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    result = mysql_store_result( mysql );
    if( result == NULL ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    
    *uidsLen = mysql_num_rows( result );
    dst = new userid_t[ *uidsLen ];
    for( int i = 0; ( row = mysql_fetch_row(result) ) != 0 && i < *uidsLen ; i++ ){
        dst[ i ] = atoi( row[ 0 ] );
    }
    mysql_free_result( result );
    *uids = dst;
    
    return RES_OK;
}

/**
 * 
 * ?違???若????絮????若?九????/span>
 * 
 * @param 
 * @return 
 * 
 */
result_t deleteMember( sessionid_t sid, groupid_t gid, userid_t uid )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !uidExists( uid ) ) return RES_NO_SUCH_USER; //uid??????????с????/span>
    if( !gidExists( gid ) ) return RES_NO_SUCH_GROUP; //gid??????????с????/span>
    
    string sql;
    
    sql = "DELETE FROM " + dbprefix + "_vpaccount_groups_users_link ";
    sql += "WHERE gid=" + string( unsignedIntToString( gid ) );
    sql += " AND uid=" + string( unsignedIntToString( uid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    return RES_OK;
}

/**
 * 
 * ?違???若????絮????若?区申??
 * 
 * @param sid ?祉???激?с??D
 * @param gid ??絮????違???若????D
 * @param uid ??絮??????????若?吟??D
 * @param admin 膊∞????罔?????筝?????????true
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * @return RES_ERROR 
 * 
 */
result_t insertMember( sessionid_t sid, groupid_t gid, userid_t uid, bool admin )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !uidExists( uid ) ) return RES_NO_SUCH_USER; //uid??????????с????/span>
    if( !gidExists( gid ) ) return RES_NO_SUCH_GROUP; //gid??????????с????/span>
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    groupid_t* dst = 0;
    result_t res;
    
    //?＜?潟???若??菴遵??
    sql = "INSERT INTO " + dbprefix + "_vpaccount_groups_users_link ( gid, uid, is_admin ) VALUES (";
    sql += string( unsignedIntToString( gid ) ) + ", ";
    sql += string( unsignedIntToString( uid ) ) + ", ";
    sql += string( admin ? "1" : "0" ) + ") ";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    return RES_OK;
}

/**
 * 
 * ?違???若????絮????若?九??
 * 
 * @param 
 * @return 
 * 
 */
result_t getMembers( sessionid_t sid, groupid_t gid, criteria_t* cri, userid_t** uids, int* uidsLen )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !gidExists( gid ) ) return RES_NO_SUCH_GROUP; //gid??????????с????/span>
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    userid_t* dst = 0;
    int len = 0;
    
    //?＜?潟???惹?違??羆??????＜?≪??∈篆?
    sql = "SELECT COUNT(*) FROM " + dbprefix + "_vpaccount_groups_users_link ";
    sql += " WHERE gid=" + string( unsignedIntToString( gid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    result = mysql_store_result( mysql ) ;
    if( row = mysql_fetch_row(result) ){
        len = atoi( row[ 0 ] );
        dst = new userid_t[ len ];
    }else{
        mysql_free_result( result );
        return RES_ERROR;
    }
    mysql_free_result( result );
    
    sql = "SELECT uid, gid, is_admin FROM " + dbprefix + "_vpaccount_groups_users_link ";
    sql += " WHERE gid=" + string( unsignedIntToString( gid ) );
    sql += " " + string( criteria2str( cri ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        delete[] dst;
        *uidsLen = 0;
        return RES_DB_QUERY_ERROR;
    }
    *uidsLen = 0;
    result = mysql_use_result( mysql ) ;
    for( int i = 0; ( row = mysql_fetch_row(result) ) != 0 && i < len ; i++ ){
        dst[ i ] = atoi( row[ 0 ] );
        ( *uidsLen )++;
    }
    mysql_free_result( result );
    *uids = dst;
    return RES_OK;
}

/**
 * 
 * ?違???若????????/span>
 * 
 * @param 
 * @return RES_OK
 * @return RES_DB_QUERY_ERROR
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_NOT_INITIALIZED
 * 
 */
result_t deleteGroup( sessionid_t sid, groupid_t gid )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    sql = "DELETE FROM " + dbprefix + "_vpaccount_groups ";
    sql += "WHERE gid = " + string( unsignedIntToString( gid ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    return RES_OK;
}

/**
 * 
 * ?違???若???脂?? 
 * ?違???若???????宴?????若?帥???若?鴻????蚊???障??.
 * ?脂?蚊?????違???若?????綽??????違???若??ID??gid???主????障??.
 * 
 * @param sid ?祉???激?с??D
 * @param group ?脂?蚊???????違???若????????/span>
 * @param gid ?脂?蚊?????違???若?????綽??????違???若??ID
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t insertGroup( sessionid_t sid, const group_t* group, groupid_t* gid )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    sql = "INSERT INTO " + dbprefix + "_vpaccount_groups ( gname, gdesc ) VALUES (";
    sql += "'" + string( addSlashes( group -> getGname( ) ) ) + "', ";
    sql += "'" + string( addSlashes( group -> getDesc( ) ) ) + "' )";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    *gid = mysql_insert_id( mysql );
    return RES_OK;
}

/**
 * 
 * ?違???若?????宴??紊??眼????
 * 
 * @param sid ?祉???激?с??D
 * @param group ?違?????違???若??????/span>
 * @return RES_OK
 * @return RES_ERROR
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_GROUP
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t updateGroup( sessionid_t sid, const group_t* group )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( group == NULL ) return RES_ERROR;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !gidExists( group -> getGID( ) ) ) return RES_NO_SUCH_GROUP;
    
    string sql;
    sql = "UPDATE " + dbprefix + "_vpaccount_groups SET ";
    sql += "gname='" + string( addSlashes( group -> getGname( ) ) ) + "', ";
    sql += "gdesc='" + string( addSlashes( group -> getDesc( ) ) ) + "' ";
    sql += "WHERE gid=" + string( unsignedIntToString( group -> getGID( ) ) );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    return RES_OK;
}

/**
 * 
 * ?違???若?????怨??
 * 
 * @param sid ?祉???激?с??D
 * @param gid ??緇????????違???若????ID
 * @param group ??緇??????違???若?????宴???≪?????鴻???吾??莨若?????ゃ?潟??/span>
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_GROUP
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t getGroup( sessionid_t sid, groupid_t gid, const group_t** group )
{
    int len;
    static criteria c;
    result_t res = getGroups( sid, &gid, 1, &c, group, &len );
    if( len == 0 ) return RES_NO_SUCH_GROUP;
    return res;
}

/**
 * 
 * 茲??違???違???若?????宴??筝?綺?????????.
 * 
 * @param sid ?祉???激?с??D
 * @param gids ??緇????????違???若????ID??????
 * @param gidsLen gids???????膣???/span>
 * @param cri 腟???????膀??駕??純?若???＞散????絎?
 * @param groups ??緇?腟??????違???若?????宴?????????≪?????鴻???吾??莨若?????ゃ?潟??/span>
 * @param groupsLen ??緇?腟????????????膣???/span>
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t getGroups( sessionid_t sid, groupid_t* gids, int gidsLen, criteria_t* cri, const group_t** groups, int* groupsLen )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    group_t* dst = new group_t[ gidsLen ];
    
    sql += "SELECT gid, gname, gdesc ";
    sql += "FROM " + dbprefix + "_vpaccount_groups ";
    sql += "WHERE gid=" + string( unsignedIntToString( gids[ 0 ] ) );
    for( int i = 1; i < gidsLen; i++ ){
        sql += " OR gid=" + string( unsignedIntToString( gids[ i ] ) );
    }
    sql += criteria2str( cri );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    result = mysql_use_result( mysql ) ;
    *groupsLen=0;
    for( int i = 0; ( row = mysql_fetch_row(result) ) != 0 && i < gidsLen ; i++ ){
        dst[ i ].setGID( atoi( row[ 0 ] ) );
        dst[ i ].setGname( row[ 1 ] );
        dst[ i ].setDesc( row[ 2 ] );
        ( *groupsLen )++;
    }
    mysql_free_result( result );
    *groups = dst;
    return RES_OK;
}

/**
 * 
 * ?≪?????若?炊┤???????＜??菴???
 * 
 * @param sid ?祉???激?с??D
 * @param uid ???????????????若?吟??ID
 * @return true 罔???????
 * @return false 罔???????
 * 
 */
bool isModerator( sessionid_t sid, userid_t uid )
{
    if( mysql == NULL ) return false;
    if( !isValidSessionID( sid ) ) return false;
    //if( !uidExists( uid ) ) return false;
    
    string sql;
    MYSQL_RES* result;
    MYSQL_ROW row;
    groupid_t* dst = 0;
    result_t res;
    
    sql = "SELECT value FROM " + dbprefix + "_vpaccount_config";
    sql += " WHERE name='moderator_gid'";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%s\n", sql.c_str( ) );
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return false;
    }
    result = mysql_store_result( mysql ) ;
    if( result == NULL ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return false;
    }
    if( row = mysql_fetch_row(result) ){
        sql = "SELECT * from " + dbprefix + "_groups_users_link ";
        sql += "WHERE groupid=" + string( row[ 0 ] );
        sql += " AND uid=" + string( unsignedIntToString( uid ) );
        mysql_free_result( result );
        
        if( mysql_query( mysql, sql.c_str( ) ) ){
            fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
            return false;
        }
        result = mysql_store_result( mysql );
        if( result == NULL ){
            fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
            return false;
        }
        if( !mysql_fetch_row(result) ){
            mysql_free_result( result );
            return false;
        }
        mysql_free_result( result );
        return true;
    }else{
        mysql_free_result( result );
        return false;
    }
}

/**
 * 
 * ???若??D??緇?
 * 
 * @param uname ID????緇??????????若?吟?弱??
 * @param uid ID??篁ｅ?ャ??????紊??違?????ゃ?潟??/span>
 * @return RES_ERROR
 * @return RES_OK 
 * @refer result_t
 * 
 */
result_t getUid( const char* uname, userid_t* uid )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    if( uname == NULL ) return RES_ERROR;
    
    string sql;
    string uname2 = addSlashes( uname );
    sql = "SELECT uid FROM " + dbprefix + "_users WHERE uname='" + uname2 + "';";
    if( mysql_query( mysql, sql.c_str( ) ) ){
        fprintf( stderr, "%d %s\n", mysql_errno(mysql), mysql_error(mysql) );
        return RES_DB_QUERY_ERROR;
    }
    MYSQL_RES* result = mysql_store_result( mysql ) ;
    MYSQL_ROW row = mysql_fetch_row(result);
    if( row ){
        *uid = atoi( row[0] );
        mysql_free_result( result );
        return RES_OK;
    }else{
        mysql_free_result( result );
        return RES_NO_SUCH_USER;
    }
}

/**
 * 
 * ?祉???激?с?潟??篏?????xoops_vpaccount_session???吾??莨若???? sessionid_t??session???????
 * 
 * @param uid xoops_users??id
 * @param session sessionid_t???????????????????ゃ?潟?帥??
 * @return RES_OK ????
 * @return RES_DB_QUERY_ERROR DB????????筝?????????/span>
 */
static result_t addSession( userid_t uid, sessionid_t* session )
{
    result_t ret;
    string sql = "INSERT INTO " + dbprefix + "_vpaccount_session (uid) values (" + 
      unsignedIntToString(uid) + ")";
    if ( 0 == mysql_query( mysql, sql.c_str() ) ){
        *session = (int)mysql_insert_id(mysql);
        ret = RES_OK;
    }
    else {
        ret = RES_DB_QUERY_ERROR;
    }
    return ret;
}


/**
 * 
 * ???違?ゃ?活?荐若???祉???激?с?割???
 * 
 * @param uname ???違?ゃ?喝??
 * @param passwd ???鴻???若??
 * @param session sessionid_t???????????????????ゃ?潟?帥??
 * @return RES_OK ???違?ゃ?恰??????session??essionid_t???吾??莨若??????<br>
 * @return RES_LOGIN_FAILURE uname?障????asswd???医幻<br>
 * @return RES_DB_QUERY_ERROR DB????????筝?????????/span>
 * 
 */
result_t loginUser(const char* uname, const char* passwd, sessionid_t* session )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    
    result_t ret;
    string sql;
    
    // uname, passwd -> uid
    string escUname = addSlashes( uname );
    string escPasswd = addSlashes( passwd );
    sql = "SELECT uid FROM " + dbprefix + "_users WHERE uname='" + escUname + "' and pass=md5('" + escPasswd + "')";
    if( 0 == mysql_query( mysql, sql.c_str( ) ) ){
        MYSQL_RES* result = mysql_store_result( mysql );
        if( result ){
            MYSQL_ROW row = mysql_fetch_row(result);
            if( row ){
                userid_t uid = atoi(row[0]);
                ret = addSession( uid, session );
            }else{
                ret = RES_LOGIN_FAILURE;
            }
            mysql_free_result( result );
        }else {
            ret = RES_DB_QUERY_ERROR;
        }
    }else{
        ret = RES_DB_QUERY_ERROR;
    }
    
    return ret;
}

/**
 * 
 * ???違?≪???????祉???激?с?括?篋?
 * 
 * @param sid session id
 * @return ????
 * 
 */
void logoutUser( sessionid_t sid )
{
    if( mysql == NULL ) return; // RES_DB_NOT_INITIALIZED;
    
    result_t ret;
    string sql;
    
    sql = "DELETE FROM " + dbprefix + "_vpaccount_session WHERE sid=" + intToString((int)sid);
    if ( 0 == mysql_query( mysql, sql.c_str() ) ){
        if ( mysql_affected_rows(mysql) == 1 ){
            // ???違?≪????????
        }
        else {
            // sid???≦??/span>
        }
    }
    else {
        // DB????????筝?????????/span>
    }
}

/**
 * 
 * ?祉???激?с?潟?????.<br>
 * XOOPS??ession???若????????蚊??????sess_id?????ess_id??膈???????
 * ?逸?session_t??篏?????????
 * ???若?帥???若?鴻???祉???激?с?潟????違?????宴??荐??蚊????
 * 
 * @param sessionid xoops??ession_id
 * @param uid  xoops_users??id
 * @param session sessionid_t???????????????????ゃ?潟?帥??
 * @return RES_OK ??????<br>
 * @return RES_ERROR
 * @return RES_DB_QUERY_ERROR
 *
 */
result_t createSession( const char* sess_id, userid_t uid, sessionid_t* session )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    
    result_t ret;
    string sql;
    
    string escSess_id = addSlashes(sess_id);
    sql = "SELECT sess_id from " + dbprefix + "_session where sess_id='" + escSess_id + "'";
    if( 0 == mysql_query( mysql, sql.c_str( ) ) ){
        MYSQL_RES* result = mysql_store_result( mysql );
        if( result ){
            MYSQL_ROW row = mysql_fetch_row(result);
            if( row ){
                ret = addSession( uid, session );
            }else{
                ret = RES_ERROR;
            }
            mysql_free_result( result );
        }else {
            ret = RES_DB_QUERY_ERROR;
        }
    }else{
        ret = RES_DB_QUERY_ERROR;
    }
    
    return ret;
}

/**
 * 
 * ?祉???激?с?潟???膣違??session_t?у??????.<br>
 * 
 * @param sid ?祉???激?с??D
 * @param ppsession sessionid_t*???????????????????ゃ?潟?帥??
 * @return RES_OK ??????freeResult(*ppsession)??綽?荀???<br>
 * @return RES_NO_SUCH_SESSION<br>
 * @return RES_DB_QUERY_ERROR<br>
 * @return RES_DB_NOT_INITIALIZED
 *
 */
result_t getSession( sessionid_t sid, const session_t** ppsession )
{
    if( mysql == NULL ) return RES_DB_NOT_INITIALIZED;
    
    result_t ret;
    string sql;
    
    sql = "SELECT sid, uid, unix_timestamp(timestamp) from " + dbprefix + 
      "_vpaccount_session where sid=" + unsignedIntToString((unsigned int)sid);
    if( 0 == mysql_query( mysql, sql.c_str( ) ) ){
        MYSQL_RES* result = mysql_store_result( mysql );
        if( result ){
            MYSQL_ROW row = mysql_fetch_row(result);
            if( row ){
                session_t *p = new session[1];
                p->setSessionID(sid);
                p->setUserID(atoi(row[1]));
                p->setDate(atoi(row[2]));
                *ppsession = p;
                ret = RES_OK;
            }else{
                ret = RES_NO_SUCH_SESSION;
            }
            mysql_free_result( result );
        }else {
            ret = RES_DB_QUERY_ERROR;
        }
    }else{
        ret = RES_DB_QUERY_ERROR;
    }
    
    return ret;
}

/**
 * 
 * ?祉???激?с?潟???綵??с?????с????????.
 * 
 * @param sid ???с??????????session
 * @return true 罩ｅ?
 * @return false 筝?罩?/span>
 *
 */
bool isValidSessionID( sessionid_t sid )
{
    if( mysql == NULL ) return false;
    
    string sql;
    string sidstr;
    char buf[ 12 ];
    snprintf( buf, 12, "%d", sid );
    
    sql = "SELECT * FROM " + dbprefix + "_vpaccount_session WHERE sid=" + string( buf );
    if( mysql_query( mysql, sql.c_str( ) ) ){
        return false;
    }
    MYSQL_RES* result = mysql_store_result( mysql ) ;
    MYSQL_ROW row = mysql_fetch_row(result);
    mysql_free_result( result );
    if( row ){
        return true;
    }else{
        return false;
    }
}

void freeResult( const account_t* ptr ){ delete[] ( account_t* )ptr; }
void freeResult( const group_t* ptr ){ delete[] ( group_t* )ptr; }
void freeResult( const session_t* ptr ){ delete[] ( session_t* )ptr; }
void freeResult( const int* ptr ){ delete[] ( int* )ptr; }

static string errstr;
const char* getLastErrorString()
{
    return errstr.c_str( );
}

void setLastErrorString( const char* str )
{
    errstr = str;
}