xoonips/AL/commonal.cc

/*
 * 
 * $Revision: 1.40 $
 * $Log: commonal.cc,v $
 * Revision 1.40  2005/01/17 00:15:05  aga
 * ??eleteIndex, updateIndex??け????????????????????篆??.
 *
 * Revision 1.39  2005/01/15 05:38:10  youi
 * insertAccount: ??絖??????????＜???泣?ゃ?肴??眼????
 * updateAccount: ??絖??????????＜???泣?ゃ?肴??眼????
 * ?≪?ゃ????膊∞???∽?違??絎?臂?????.
 *     insertItem, getItem, getItems, dumpItemID, updateItem, deleteItem????
 * freeGID, freeUID: 綣??違??????篆??.
 *
 * Revision 1.38  2005/01/15 00:39:16  aga
 * ??_xnpaccount_item_basic???????紊???
 *
 * Revision 1.37  2005/01/14 10:36:59  aga
 * ??ndex?≫?????????菴遵??.
 * ??nsertAccount??rivate index??篏???????????篆??.
 * ??nsertGroup??roup index ??篏???????????篆??.
 *
 * Revision 1.36  2005/01/13 04:19:22  aga
 * ??P??XNP?????.
 *
 * Revision 1.35  2005/01/06 07:20:17  youi
 * WIN32絎?臂??????ゃ?潟?????若????申??.
 * MySQL API???≪?????????????＜?ゃ????????
 * deleteAccount: ??絮?????Platform?違???若???????????ゃ?????泣????.
 * insertAccount: ???若?句?脂?蚊??????????????????Platform?違???若???悟?脂?蚊????.
 * deleteMember: ??????????Platform?違???若???????????ゃ??胼?罩≪????.
 * deleteMemberNoLimit???臂?
 *
 * Revision 1.34  2004/12/28 04:38:14  aga
 * ??ogoutUser()??信罩?
 *
 * Revision 1.33  2004/12/27 05:56:23  youi
 * odbcDiagString: STMT篁ュ?????潟??????????????????????眼????.
 * syslog?＜???祉?若?吾????????菴遵??????.
 *
 * Revision 1.32  2004/12/25 09:46:47  youi
 * MySQL+MyODBC?у??篏???????????信罩ｃ????.
 *
 * Revision 1.31  2004/12/21 11:42:59  youi
 * ?潟?＜?潟??????逸??祉???ゃ???????????菴遵??.
 *
 * Revision 1.30  2004/12/18 10:24:54  youi
 * IMPORT_MYSQLDLL??絎?臂?????????鐚?MYSQL??LL?????????潟?????????????帥?ゃ??絎ｈ???
 * ???鴻????????????信罩ｃ????.
 *
 * Revision 1.29  2004/12/18 01:12:29  youi
 * freeResult???∽?医????free<???若?水??>????眼????.
 *
 * Revision 1.28  2004/12/14 12:02:08  youi
 * __WIN__??絎?臂???????????indows??ll篏??????荀?????????茵?????.
 * USE_SYSLOG??絎?臂???????????yslogd?吾?＜???祉?若?吾???阪??????.
 * getAccounts: uidsLen??0??????????????菴遵??????.
 *
 * Revision 1.27  2004/12/06 11:34:47  aga
 * ??ninitializeDB()??菴遵??.
 *
 * Revision 1.26  2004/12/06 10:17:36  youi
 * mysql_use_result????腟?????罧??????????冴??????鐚?
 * while( row = mysql_fetch_row(result) );???水?ワ?
 *
 * Revision 1.25  2004/12/06 07:24:33  youi
 * insertAccount, insertGroup:
 *     ?域?菴遵?????????宴???綽????????若??D鐚??違???若??ID??膃??綣??違???吾??莨若??.
 *
 * Revision 1.24  2004/12/06 01:45:50  aga
 * ?祉?潟?＜?潟???ゃ??.
 * ?脂???上???篆??.
 *
 * Revision 1.23  2004/12/04 09:21:10  aga
 * ??np_config ?? xnpaccount_config.
 *
 * Revision 1.22  2004/12/03 07:17:21  youi
 * isModerator?с?≪???祉?鴻???????若?帥???若?鴻???若????????篆??.
 *
 * Revision 1.21  2004/12/01 10:28:58  youi
 * DB????????????眼??軸??篆??
 *     institute -> division
 *     organizaion -> company_name
 *
 * Revision 1.20  2004/12/01 04:37:04  youi
 * freeResult: unsigned int* ?? int* ?娯信罩?
 * ?潟?＜?潟???????∽?違???????菴処?.
 *
 * Revision 1.19  2004/11/30 06:40:11  youi
 * ?∽?違??菴遵??(gidExists, uidExists)
 * getGroupCount??絎?臂?
 * getGroupsByUid??絎?臂?
 * isGroupAdmin??篆??.
 * dumpGroupAdmins??絎?臂?
 * deleteMember??絎?臂?
 * insertMember??絎?臂?
 * getMembers??絎?臂?
 * isModerator??絎?臂?
 *
 * Revision 1.18  2004/11/30 05:46:32  aga
 * ??ession????remoteHost??????
 *
 * Revision 1.17  2004/11/27 09:35:49  youi
 * isActivated??絎?臂?
 * activate??絎?臂?
 * dumpUid??絎?臂?
 *
 * Revision 1.16  2004/11/27 06:29:29  youi
 * getAccountCount??絎?臂?
 * dumpGids??絎?臂?
 * insertGroup, deleteGroup, updateGroup??絎?臂?
 * getGroup, getGroups??絎?臂?
 * ???若?帥???若?劫?????????弱?冴?????鐚?RES_DB_NOT_INITIALIZED??菴????????????∽?違??申??
 * (???綽????∽?違??罧??ｃ??????)
 *
 * Revision 1.15  2004/11/27 02:22:22  aga
 * ??nitializeDB????ddSlashes()???若?吟???純?＜??????篆??.
 *
 * Revision 1.14  2004/11/27 01:07:31  youi
 * criteria2str: LIMIT??RDER BY?????????ャ???帥????.
 *
 * Revision 1.13  2004/11/27 00:35:39  youi
 * getAccounts??絎?臂?
 * getAccount??篆??鐚???????etAccounts???若?喝?冴??.
 * criteria2str??絎?臂?
 *
 * Revision 1.12  2004/11/26 09:45:28  youi
 * getAccount??絎?臂?
 *
 * Revision 1.11  2004/11/26 08:16:26  aga
 * ??etSession, loginUser, createSession, freeResult(const session_t*) 篆??.
 *
 * Revision 1.10  2004/11/26 07:57:42  youi
 * updateAccount, deleteAccount??絎?臂?
 * mysql_query紊掩??????tderr?吾?????若?潟?若?????????若?＜???祉?若?吾???阪??.
 *
 * Revision 1.9  2004/11/26 07:38:02  aga
 * ??AILUE -> FAILURE.
 *
 * Revision 1.8  2004/11/26 06:36:55  aga
 * ??reateSession, getSession ??篏???.
 *
 * Revision 1.7  2004/11/26 04:51:47  youi
 * dbprefix??絎?臂?????.
 * insertAccount??絎?臂?????.
 * isValidSessionID??絎?臂?????.
 *
 * Revision 1.6  2004/11/26 04:35:55  aga
 * ??oginUser(), logoutUser()??篏???.
 *
 * Revision 1.5  2004/11/26 01:08:25  aga
 * ??ddSlashes()篏???.
 *
 * Revision 1.4  2004/11/25 12:14:29  youi
 * getUid????????絎?臂?????.
 *
 * Revision 1.3  2004/11/25 11:13:59  youi
 * getLastErrorString/setLastErrorString??絎?臂?
 *
 * Revision 1.2  2004/11/25 08:55:19  youi
 * 綣??違??????篆??.
 * freeResult??菴遵??.
 *
 * Revision 1.1  2004/11/25 05:14:58  youi
 * initial version
 *
 * 
 */
#ifdef WIN32
#include <windows.h>
#endif

#ifdef USE_SYSLOG
#include <syslog.h>
#endif

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <string>
#include <assert.h>
#include <sql.h>
#include <sqlext.h>
using namespace std;

#include "common.h"
#include "account.h"
#include "group.h"
#include "session.h"
#include "item.h"
#include "itemtype.h"
#include "criteria.h"
#include "commonal.h"
#include "item.h"
#include "index.h"

static string dbprefix; //!< XOOPS???若?帥???若?鴻???若??????REFIX

static SQLHANDLE henv = NULL;
static SQLHANDLE hdbc = NULL;
static SQLHANDLE hstmt = NULL;

static result_t insertIndexInternal( sessionid_t sid, index_t *index, indexid_t *xid );

static string odbcDiagString( SQLSMALLINT HandleType, SQLHANDLE hstmt, SQLRETURN sqlcode );
static result_t deleteMemberNoLimit( sessionid_t sid, groupid_t gid, userid_t uid );

static result_t countResultRows( const char* sql, SQLINTEGER* count )
{
    result_t ret = RES_ERROR;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql, strlen( sql ) ) ) == SQL_SUCCESS ){
            *count = 0;
            while( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ) ( *count )++;
            ret = RES_OK;
        }else{
            string s( "SQLExecDirect in countResultRows " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += "sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }
    return ret;
}

/**
 * 
 * ?祉???激?с?潟???綽?篁????????????若??D??緇???
 *
 * @param sid ?祉???激?с??D
 * @param uid ???若??D?????????????ゃ?潟?水???/span>
 * @return RES_OK
 * @return RES_ERROR
 *
 */
static result_t getUIDFromSession( sessionid_t sid, userid_t* uid )
{
    const session_t* session;
    if( getSession( sid, &session ) == RES_OK ){
        *uid = session ->  getUID( );
        freeSession( session );
        return RES_OK;
    }
    return RES_ERROR;
}

/**
 * 
 * ?祉???激?с?潟???綽?篁????????????若?吟??鐚?Platform???若?吟??????ctivate??
 * ????????????菴???
 *
 * @param sid ?祉???激?с??D
 * @return true Activate??????????
 * @return false Activate??????????鐚??障??????????/span>
 *
 */
static bool isActivatedBySession( sessionid_t sid )
{
    const session_t* session;
    if( getSession( sid, &session ) == RES_OK ){
        userid_t sess_uid = session ->  getUID( );
        freeSession( session );
        return isActivated( sid, sess_uid );
    }
    return false;
}

/**
 * 
 * ?祉???激?с?潟???綽?篁????????????若?吟??鐚??≪?????若?帥?с??????鐚?
 * 
 * 
 * @param sid ?祉???激?с??D
 * @return true ?≪?????若??/span>
 * @return false ?≪?????若?帥?с????鐚??障??????????/span>
 *
 */
static bool isModeratorBySession( sessionid_t sid )
{
    const session_t* session;
    if( getSession( sid, &session ) == RES_OK ){
        userid_t sess_uid = session ->  getUID( );
        freeSession( session );
        return isModerator( sid, sess_uid );
    }
    return false;
}

/** SQL??絎?茵???????腟?????????????
  * @param sql sql
  * @return result_t
  */
static result_t querySimple( const char *functionName, string &sql ){
    result_t ret = RES_ERROR;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), strlen( sql.c_str() ) ) ) == SQL_SUCCESS ){
            ret = RES_OK;
        }else{
            string s( "SQLExecDirect in querySimple " );
            s += functionName;
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += "sql=";
            s += sql;
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }
    else {
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in querySimple " );
        ret = RES_ERROR;
    }
    return ret;
}

/** SQL??絎?茵?????1茵????????????贋?医??NULL????0???帥????)???水?????????
  * @param sql sql
  * @param u   ?贋?医?ゃ??????????紊??違??
  * @return result_t
  */
static result_t queryGetUnsignedInt( const char *functionName, string &sql, unsigned int *u ){
    result_t ret = RES_ERROR;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), strlen( sql.c_str() ) ) ) == SQL_SUCCESS ){
            SQLUINTEGER sInt = 0;
            SQLINTEGER len;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &sInt, 0, &len );
            if( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                if ( len == SQL_NULL_DATA )
                    sInt = 0;
                *u = sInt;
                ret = RES_OK;
            }else{
                string s( "SQLFetch in queryGetUnsignedInt " );
                s += functionName;
                setLastErrorString( s.c_str( ) );
                ret = RES_ERROR;
            }
        }else{
            string s( "SQLExecDirect in queryGetUnsignedInt " );
            s += functionName;
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += "sql=";
            s += sql;
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }
    else {
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in queryGetUnsignedInt " );
        ret = RES_ERROR;
    }
    return ret;
}

/** sid????uid??緇?????
  * @param sid session id 
  * @param uid uid??????????紊???/span>
  * @return
  */
static result_t sessionID2UID( sessionid_t sid, userid_t *uid ){
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    
    string sql = "SELECT uid FROM " + dbprefix + "_xnpaccount_session WHERE sid=" + unsignedIntToString(sid);
    return queryGetUnsignedInt( "sessionID2UID", sql, (unsigned int*)uid );
}

/**
 * 
 * ??絖????潟???種?
 * ??絎???絖??違???潟???若??鐚????????＜????緇???NULL腟?腴?????鐚?/span>
 * ( dst???泣?ゃ? >= len + 1 )?с????????/span>
 * 
 */
static char* strncpy2( char* dst, const char* src, int len )
{
    strncpy( dst, src, len );
    dst[ len ] = '\0';
//    fprintf( stderr, "strncpy2 '%s'\n", dst );
    return dst;
}

/**
 * 
 * SQL???茵?腟????????????惹??絖?????????????
 * 
 * @param hstmt SQL??????潟????/span>
 * @param sqlcode SQLExecDirect,SQLExecute???祉????/span>
 * @return ?????惹??絖???
 */
static string odbcDiagString( SQLSMALLINT HandleType, SQLHANDLE hstmt, SQLRETURN sqlcode )
{
    string s;
    if( sqlcode == SQL_ERROR || sqlcode == SQL_SUCCESS_WITH_INFO ){
        SQLCHAR SQLState[6];
        SQLINTEGER NativeError;
        SQLCHAR MessageText[ 1024 ];
        SQLSMALLINT BufferLength;
        SQLSMALLINT TextLength;
        SQLGetDiagRec( HandleType, hstmt, 1, SQLState, &NativeError, MessageText, 1024, &TextLength );
        
        s += string( (char*)MessageText );
        s += " SQLSTATE=";
        s += string( (char*)SQLState );
        
    }
    s += " sqlcode=";
    s += intToString( sqlcode );
    return s;
}

/** 
 * 
 * ??絎??????????ゃ???????冴??????????絖?????菴???
 * 
 */
string getResultCol( SQLHANDLE hstmt, int col )
{
    string s;
    SQLRETURN sqlcode;
    SQLCHAR       BinaryPtr[5000];
    SQLUINTEGER   PartID;
    SQLINTEGER    PartIDInd, BinaryLenOrInd, NumBytes;
    SQLRETURN     rc; 
    
    while ( ( sqlcode = SQLGetData(hstmt, col, SQL_C_CHAR, BinaryPtr, sizeof(BinaryPtr),
                                   &BinaryLenOrInd)) != SQL_NO_DATA) {
        NumBytes = (BinaryLenOrInd > 5000) || (BinaryLenOrInd == SQL_NO_TOTAL) ? 5000 : BinaryLenOrInd;
        if( NumBytes >= 0 ){
            s += string( (char*)BinaryPtr, NumBytes );
        }
    }
#ifdef USE_SYSLOG
//    openlog( "commonal", LOG_ODELAY, LOG_USER );
//    syslog( LOG_DEBUG, "getResultCol col=%d ret='%s'\n", col, s.c_str());
//    closelog( );
#endif
    return s;
}


/** 
 * 
 * ?????若????????\荐??激?с???鴻?宴?若??????
 * 
 * @param str addslashes???鴻????絖?????NULL??絎?筝?????
 * @return 紊???緇?????絖???
 */
string addSlashes( const char *str )
{
        if ( hdbc == NULL ){
                string s;
                return s;
        }else{
        string s( str );
        return s;
    }
    
        int len = strlen(str) * 3;
    char* dst = new char[ len ];
    const char* from = str;
    char* to = dst;
    while( *from != '\0' ){
        switch( *from ){
        case '\'':
        case '\"':
        case ';':
            *to = '\\'; to++;
            break;
        }
        *to = *from; to++;
        from++;
    }
    *to = '\0';
        string s( dst );
    delete[] dst;
        return s;
}

/**
 * 
 * gid??????????с????
 * DB???≪???祉?劫け????????false??????鐚?/span>
 * 
 * @param gid ???с??????????GID
 * @return true 絖???????
 * @return false 絖?????????
 * 
 */
static bool gidExists( groupid_t gid )
{
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) != SQL_SUCCESS ) {
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in gidExists" );
        return false;
    }

    sql = "SELECT * FROM " + dbprefix + "_xnpaccount_groups ";
    sql += "WHERE gid=" + string( unsignedIntToString( gid ) );
    if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) != SQL_SUCCESS ){
        setLastErrorString( "SQLExecDirect in gidExists" );
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
        return false;
    }
    
    if( ( sqlcode = SQLFetch( hstmt ) ) != SQL_SUCCESS ){
        setLastErrorString( "SQLFetch in gidExists" );
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
        return false;
    }
    
    SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    return true;
}

    
/**
 * 
 * Platform???若?倶???宴??id??絖??????????????с????
 * DB???≪???祉?劫け????????false??????鐚?/span>
 * 
 * @param uid ???с??????????UID
 * @return true 絖???????
 * @return false 絖?????????
 * 
 */
static bool uidExists( userid_t uid )
{
    bool ret = false;
    string sql;
    SQLRETURN sqlcode;
    SQLINTEGER count = 0;
    
    sql = "SELECT * FROM " + dbprefix + "_xnpaccount_users ";
    sql += "WHERE uid=" + string( unsignedIntToString( uid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            if( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                ret = true;
            }else{
                string s( "SQLFetch in uidExists ");
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret = false;
            }
        }else{
            string s( "SQLExecDirect in uidExists ");
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += string( ", sql=" ) + string( sql );
            setLastErrorString( s.c_str( ) );
            ret = false;
        }
    }else{
        string s( "SQLAllocHandle in uidExists ");
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = false;
    }
    return ret;
}

    
/**
 * 
 * criteria ?? SQL?????????
 * 
 * 
 * 
 */
string criteria2str( criteria* cri )
{
    string sql;
    
    const orderby* odrby = cri -> headOrderBy( );
    if( odrby != 0 ){
        sql += " ORDER BY " + string( odrby -> getColumn( ) );
        sql += ( odrby -> getOrder( ) == orderby::DESC ) ? " DESC" : " ";
        while( ( odrby = cri -> nextOrderBy( ) ) != 0 ){
            sql += ", " + string( odrby -> getColumn( ) );
            sql += ( odrby -> getOrder( ) == orderby::DESC ) ? " DESC" : " ";
        }
    }

    if( cri -> getLimitStart( ) != 0 || cri -> getLimitRows( ) != 0 ){
        sql += " LIMIT " + string( intToString( cri -> getLimitStart( ) ) )
            + ", " + string( intToString( cri -> getLimitRows( ) ) );
    }
    return sql;
}


/**
 * 
 * ???若?帥???若?鴻????????
 * 
 * @param dsn DSN
 * @param user ???若?帥???若?鴻???≪???祉?鴻???????若?九??
 * @param password 筝?荐????若?吟?????鴻???若??
 * @param dbname ??????/span>
 * @param prefix XOOPS???若?帥???若?鴻???若??????REFIX
 * @return RES_OK
 * @return RES_DB_INITIALIZE_ERROR
 * @return RES_DB_CONNECT_ERROR
 * @refer result_t
 */
result_t initializeDB( const char* dsn, const char* user, const char* password, const char* dbname, const char* prefix )
{
    SQLRETURN sqlcode;

#ifdef USE_SYSLOG
    openlog( "commonal", LOG_ODELAY, LOG_USER );
#endif
    // ?≪??･膓?筝???????筝???????/span>
    if ( hdbc != NULL )
        SQLDisconnect( hdbc );
    
    dbprefix = prefix;
    
    // ????????･膓?
//    if( SQLAllocEnv( &henv ) != SQL_SUCCESS ) {
    if( SQLAllocHandle( SQL_HANDLE_ENV, SQL_NULL_HANDLE, &henv ) != SQL_SUCCESS ) {
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_ENV,...) in initializeDB" );
#ifdef USE_SYSLOG
        syslog( LOG_DEBUG, "initializeDB %s", getLastErrorString( ) );
        closelog( );
#endif
        return RES_DB_INITIALIZE_ERROR;
    }
    //ODBC Ver.3 ????????????????????с??荐??
    SQLSetEnvAttr(henv, SQL_ATTR_ODBC_VERSION, (void*)SQL_OV_ODBC3, 0); 
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_DBC, henv, &hdbc ) ) != SQL_SUCCESS ) {
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_DBC,...) in initializeDB" );
#ifdef USE_SYSLOG
        syslog( LOG_DEBUG, "initializeDB %s", getLastErrorString( ) );
        closelog( );
#endif
        return RES_DB_INITIALIZE_ERROR;
    }
    //???違?ゃ?潟??腱?篁ヤ?荀????????帥?ゃ???≪????????荐??
    SQLSetConnectAttr(hdbc, SQL_LOGIN_TIMEOUT, (SQLPOINTER *)5, 0);
    
    if ( ( sqlcode = SQLConnect( hdbc, (SQLCHAR*)dsn, strlen( dsn ), (SQLCHAR*)user, strlen( user ), (SQLCHAR*)password, strlen( password ) ) ) != SQL_SUCCESS ){
        string s( "SQLConnect in initializeDB " );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
#ifdef USE_SYSLOG
        syslog( LOG_DEBUG, "initializeDB %s", getLastErrorString( ) );
        closelog( );
#endif
        return RES_DB_CONNECT_ERROR;
    }
#ifdef USE_SYSLOG
    syslog( LOG_DEBUG, "initializeDB succeed" );
    closelog( );
#endif
    return RES_OK;
}

/**
 *
 * DB?ョ????????違???????????障??????
 * 
 * @param ????
 * @return RES_OK
 */
result_t uninitializeDB()
{
    if ( hdbc != NULL ){
        SQLDisconnect( hdbc );
        hdbc = NULL;
    }
    return RES_OK;
}

/**
 * 
 * Platform???若?倶?粋??倶????緇?
 * 
 * @param sid ?祉???激?с??D
 * @param uid ?倶??????緇??????????若?吟??ID
 * @return true ?粋?羝???/span>
 * @return false ???粋?
 * 
 */
bool isActivated( sessionid_t sid, userid_t uid )
{
    if( hdbc == NULL ) return false;
    if( !isValidSessionID( sid ) ) return false;
    
    bool ret = false;
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    
    sql = "SELECT * FROM " + dbprefix + "_xnpaccount_users ";
    sql += "WHERE activate=1 and uid=" + string( unsignedIntToString( uid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            if( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                ret = true;
            }else{
                string s( "SQLFetch in isActivated " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += ", sql=" + sql;
                setLastErrorString( s.c_str() );
                ret = false;
            }
        }else{
            string s( "SQLExecDirect in isActivated " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += ", sql=" + sql;
            setLastErrorString( s.c_str() );
            ret = false;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in isActivated" );
        ret = false;
    }
    return ret;
}

/**
 * 
 * Platform???若?倶?粋??倶??紊???/span>
 * 
 * @param sid ?祉???激?с??D
 * @param uid 紊??眼?????????若?吟??ID
 * @param activate ?粋?(true) / ???粋?(false)????絎?
 * @return RES_OK
 * @return RES_DB_QUERY_ERROR
 * @return RES_NO_SUCH_USER
 */
result_t activate( sessionid_t sid, userid_t uid, bool activate )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    SQLRETURN sqlcode;
    result_t ret = RES_ERROR;
    
    sql = "UPDATE " + dbprefix + "_xnpaccount_users ";
    sql += "SET activate=" + string( activate ? "1" : "0" );
    sql += " WHERE uid=" + string( unsignedIntToString( uid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLINTEGER count = 0;
            if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                ret = RES_OK;
            }else{
                string s( "SQLRowCount in activate ");
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret = RES_NO_SUCH_USER;
            }
        }else{
            string s( "SQLExecDirect in activate " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += ", sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in activate" );
        ret = RES_ERROR;
    }
    return ret;
}

/**
 * 
 * ?≪?????潟???違????緇?????鐚?/span>
 * 
 * @param sid ?祉???激?с??D
 * @return ?≪?????潟????/span>
 * 
 */
int getAccountCount( sessionid_t sid )
{
    if( hdbc == NULL ) return 0;
    if( !isValidSessionID( sid ) ) return 0;
    
    int ret = 0;
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    
    //?≪?????潟???違??羆?????
    sql = "SELECT COUNT(*) FROM " + dbprefix + "_xnpaccount_users ";
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLUINTEGER count = 0;
            SQLINTEGER len;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &count, 0, &len );
            if( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                ret = count;
            }else {
                string s( "SQLFetch in getAccountCount sql=" );
                s += string( sql );
                setLastErrorString( s.c_str( ) );
                ret = 0;
            }
        }else{
            setLastErrorString( "SQLExecDirect in getAccountCount" );
            ret = 0;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in getAccountCount" );
        ret = 0;
    }
    return ret;
}

/**
 * 
 * ?≪?????潟??????/span>
 * ?違???若???????????ゃ?????若?倶???宴?????ゃ??茵??????障??鐚?/span>
 * 
 * @param 
 * @return RES_OK
 * @return RES_ERROR
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t deleteAccount( sessionid_t sid, userid_t uid )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;

    result_t ret1 = RES_ERROR, ret2 = RES_ERROR;
    criteria_t c;
    string sql;
    groupid_t* gids;
    int gidsLen;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    
    /*
      1. delete user from default platform group
      2. delete user profile from xoops_users
      3. delete platform user from xnpaccount_users
     */
    
    //1. delete user from platform groups
    c.clearAll();
    if( getGroupsByUid( sid, uid, &c, &gids, &gidsLen ) == RES_OK ){
        for( int i = 0; i < gidsLen; i++ )
            deleteMemberNoLimit( sid, gids[ i ], uid );
        freeGID( gids );
    }
    
    //2. delete user profile from xoops_users
    sql = "DELETE FROM " + dbprefix + "_users ";
    sql += "WHERE uid = " + string( unsignedIntToString( uid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLINTEGER count = 0;
            if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                ret1 = RES_OK;
            }else{
                string s( "SQLRowCount in deleteAccount" );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret1 = RES_NO_SUCH_USER;
            }
        }else{
            string s( "SQLExecDirect in deleteAccount" );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += ", sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret1 = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in deleteAccount" );
        ret1 = RES_ERROR;
    }
    
    //3. delete platform user from xnpaccount_users
    sql = "DELETE FROM " + dbprefix + "_xnpaccount_users ";
    sql += "WHERE uid = " + string( unsignedIntToString( uid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLINTEGER count = 0;
            if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                ret2 = RES_OK;
            }else{
                string s( "SQLRowCount in deleteAccount" );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret2 = RES_NO_SUCH_USER;
            }
        }else{
            string s( "SQLExecDirect in deleteAccount" );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += ", sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret2 = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in deleteAccount" );
        ret2 = RES_ERROR;
    }
    
    //筝??鴻?с???????若?????????若??菴???
    return ret1 != RES_OK ? ret1 : ret2;
}

/**
 * 
 * ?≪?????潟?????怨??
 * 
 * @param sid ?祉???激?с??D
 * @param uid ??緇??????????若?吟??ID
 * @param acc ??緇??????≪?????潟??????account_t)?????ゃ?潟?帥???吾??莨若??綣???/span>
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_USER
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t getAccount( sessionid_t sid, userid_t uid, const account_t** acc )
{
    int len;
    static criteria c;
    result_t res = getAccounts( sid, &uid, 1, &c, acc, &len );
    if( len == 0 ) return RES_NO_SUCH_USER;
    return res;
}

/**
 * 
 * ?≪?????潟?????怨??
 * 
 * @param sid ?祉???激?с??D
 * @param uids ??緇??????????若?吟??ID??????
 * @param uidsLen uids???????膣???/span>
 * @param cri 腟???????我??絎?鐚??純?若???＞散??絎?
 * @param accounts 罎?膣∝??????????????ゃ?潟?帥???吾??莨若??綣???/span>
 * @param accountsLen 罎?膣∝???????????*accounts???膣???
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t getAccounts( sessionid_t sid, const userid_t* uids, int uidsLen, criteria_t* cri, const account_t** accounts, int* accountsLen )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( uidsLen <= 0 ){
        *accounts = new account_t[ 0 ];
        *accountsLen = 0;
#ifdef USE_SYSLOG
    openlog( "commonal", LOG_ODELAY, LOG_USER );
    syslog( LOG_DEBUG, "getAccounts succeed len=0" );
    closelog( );
#endif
        return RES_OK;
    }
    
#ifdef USE_SYSLOG
    openlog( "commonal", LOG_ODELAY, LOG_USER );
    syslog( LOG_DEBUG, "begin of getAccounts" );
#endif
    result_t ret = RES_ERROR;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    string sql;
    account_t* dst = new account_t[ uidsLen ];
    
    sql += "SELECT u1.uid, u1.name, u1.uname, u1.email, u1.url, u1.user_avatar, u1.user_regdate, u1.user_icq, u1.user_from, u1.user_sig, u1.user_viewemail, u1.actkey, u1.user_aim, u1.user_yim, u1.user_msnm, u1.pass, u1.posts, u1.attachsig, u1.rank, u1.level, u1.theme, u1.timezone_offset, u1.last_login, u1.umode, u1.uorder, u1.notify_method, u1.notify_mode, u1.user_occ, u1.bio, u1.user_intrest, u1.user_mailok, u2.activate, u2.address, u2.division, u2.tel, u2.company_name, u2.country, u2.zipcode, u2.fax, u2.base_url, u2.notice_mail, u2.notice_mail_since, u2.private_index_id ";
    sql += "FROM " + dbprefix + "_users AS u1, " + dbprefix + "_xnpaccount_users AS u2 ";
    sql += "WHERE u1.uid = u2.uid ";
    if( uidsLen > 0 ){
#ifdef USE_SYSLOG
        syslog( LOG_DEBUG, "set uid[%d] value=%d to ...", 0, uids[0] );
#endif
        sql += "AND ( u1.uid=" + string( unsignedIntToString( uids[ 0 ] ) );
        for( int i = 1; i < uidsLen; i++ ){
#ifdef USE_SYSLOG
        syslog( LOG_DEBUG, "set uid[%d] value=%d to ...", i, uids[i] );
#endif
            sql += " OR u1.uid=" + string( unsignedIntToString( uids[ i ] ) );
        }
        sql += " ) ";
    }
    sql += criteria2str( cri );
#ifdef USE_SYSLOG
        syslog( LOG_DEBUG, "sql=%s", sql.c_str() );
#endif
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLINTEGER len;
            userid_t uid = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &uid, 0, &len );
            *accountsLen=0;
            for( int i = 0; ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS && i < uidsLen ; i++ ){
                dst[ i ].setUID( uid );
                dst[ i ].setName( getResultCol( hstmt, 2 ).c_str() );
                dst[ i ].setUname( getResultCol( hstmt, 3 ).c_str() );
                dst[ i ].setEmail( getResultCol( hstmt, 4 ).c_str() );
                dst[ i ].setURL( getResultCol( hstmt, 5 ).c_str() );
                dst[ i ].setUserAvatar( getResultCol( hstmt, 6 ).c_str() );
                dst[ i ].setUserRegdate( atoi( getResultCol( hstmt, 7 ).c_str() ) );
                dst[ i ].setUserIcq( getResultCol( hstmt, 8 ).c_str() );
                dst[ i ].setUserFrom( getResultCol( hstmt, 9 ).c_str() );
                dst[ i ].setUserSig( getResultCol( hstmt, 10 ).c_str() );
                dst[ i ].setUserViewemail( atoi( getResultCol( hstmt, 11 ).c_str() ));
                dst[ i ].setActkey( getResultCol( hstmt, 12 ).c_str() );
                dst[ i ].setUserAim( getResultCol( hstmt, 13 ).c_str() );
                dst[ i ].setUserYim( getResultCol( hstmt, 14 ).c_str() );
                dst[ i ].setUserMsnm( getResultCol( hstmt, 15 ).c_str() );
                dst[ i ].setPass( getResultCol( hstmt, 16 ).c_str() );
                dst[ i ].setPosts( atoi( getResultCol( hstmt, 17 ).c_str() ));
                dst[ i ].setAttachsig( atoi( getResultCol( hstmt, 18 ).c_str() ));
                dst[ i ].setRank( atoi( getResultCol( hstmt, 19 ).c_str() ));
                dst[ i ].setLevel( atoi( getResultCol( hstmt, 20 ).c_str() ));
                dst[ i ].setTheme( getResultCol( hstmt, 21 ).c_str() );
                dst[ i ].setTimezoneOffset( atof( getResultCol( hstmt, 22 ).c_str() ) );
                dst[ i ].setLastLogin( atoi( getResultCol( hstmt, 23 ).c_str() ));
                dst[ i ].setUmode( getResultCol( hstmt, 24 ).c_str() );
                dst[ i ].setUorder( atoi( getResultCol( hstmt, 25 ).c_str() ));
                dst[ i ].setNotifyMethod( atoi( getResultCol( hstmt, 26 ).c_str() ));
                dst[ i ].setNotifyMode( atoi( getResultCol( hstmt, 27 ).c_str() ));
                dst[ i ].setUserOcc( getResultCol( hstmt, 28 ).c_str() );
                dst[ i ].setBio( getResultCol( hstmt, 29 ).c_str() );
                dst[ i ].setUserIntrest( getResultCol( hstmt, 30 ).c_str() );
                dst[ i ].setUserMailok( atoi( getResultCol( hstmt, 31 ).c_str() ));
                dst[ i ].setActivate( atoi( getResultCol( hstmt, 32 ).c_str() ));
                dst[ i ].setAddress( getResultCol( hstmt, 33 ).c_str() );
                dst[ i ].setDivision( getResultCol( hstmt, 34 ).c_str() );
                dst[ i ].setTel( getResultCol( hstmt, 35 ).c_str() );
                dst[ i ].setCompanyName( getResultCol( hstmt, 36 ).c_str() );
                dst[ i ].setCountry( getResultCol( hstmt, 37 ).c_str() );
                dst[ i ].setZipcode( getResultCol( hstmt, 38 ).c_str() );
                dst[ i ].setFax( getResultCol( hstmt, 39 ).c_str() );
                dst[ i ].setBaseURL( getResultCol( hstmt, 40 ).c_str() );
                dst[ i ].setNoticeMail( atoi( getResultCol( hstmt, 41 ).c_str() ));
                dst[ i ].setNoticeMailSince( atoi( getResultCol( hstmt, 42 ).c_str() ));
                dst[ i ].setPrivateIndexID( atoi( getResultCol( hstmt, 43 ).c_str() ));
#ifdef USE_SYSLOG
                syslog( LOG_DEBUG, "set to account_t %d", i );
#endif
                ( *accountsLen )++;
            }
            *accounts = dst;
#ifdef USE_SYSLOG
            syslog( LOG_DEBUG, "getAccounts succeed" );
#endif
            ret = RES_OK;
        }else{
            string s( "SQLExecDirect in getAccounts" );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += string( ", sql=" ) + string( sql );
            setLastErrorString( s.c_str( ) );
#ifdef USE_SYSLOG
            syslog( LOG_DEBUG, "getAccounts %s", getLastErrorString( ) );
#endif
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in getAccounts" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
#ifdef USE_SYSLOG
        syslog( LOG_DEBUG, "getAccounts %s", getLastErrorString( ) );
#endif
        ret = RES_DB_QUERY_ERROR;
    }
#ifdef USE_SYSLOG
    closelog( );
#endif
    return ret;
}

/**
 * 
 * ?≪?????潟???脂??
 * 
 * ???若?倶???宴?????若?帥???若?鴻???脂?蚊???障??鐚?/span>
 * ?脂?蚊???????若?倶???宴???綽????????若??D??uid???主????障??鐚?/span>
 * 
 * @param sid ?祉???激?с??/span>
 * @param account ?脂?蚊?????≪?????潟??????/span>
 * @param uid ?脂?蚊?????≪?????潟?????宴???綽????????若??D
 * @return RES_OK
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * @return RES_DB_NOT_INITIALIZED
 * 
 */
result_t insertAccount( sessionid_t sid, const account_t* account, userid_t* uid )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    string tmp;
    char buf[ 12 ];
    SQLRETURN sqlcode;
    result_t ret = RES_ERROR;
    
    /*
      1. insert user profile into xoops_users
      2. insert platform user profile into xnpaccount_users
      3. add user to default platform group
      4. create private index
      5. update account set private_index_id=...
     */
    
    //1.xoops?????若?吟???若???????吾??莨若??
    SQLCHAR uname[ACCOUNT_UNAME_LEN+1], name[ACCOUNT_NAME_LEN+1], email[ACCOUNT_EMAIL_LEN+1], url[ACCOUNT_URL_LEN+1], user_avatar[ACCOUNT_USER_AVATAR_LEN+1], user_icq[ACCOUNT_USER_ICQ_LEN+1], user_from[ACCOUNT_USER_FROM_LEN+1], user_sig[ACCOUNT_USER_SIG_LEN+1], actkey[ACCOUNT_ACTKEY_LEN+1], user_aim[ACCOUNT_USER_AIM_LEN+1], user_yim[ACCOUNT_USER_YIM_LEN+1], user_msnm[ACCOUNT_USER_MSNM_LEN+1], pass[ACCOUNT_PASS_LEN+1], theme[ACCOUNT_THEME_LEN+1], umode[ACCOUNT_UMODE_LEN+1], user_occ[ACCOUNT_USER_OCC_LEN+1], bio[ACCOUNT_BIO_LEN+1], user_intrest[ACCOUNT_USER_INTREST_LEN+1];
    SQLINTEGER user_regdate, user_viewemail, posts, attachsig, rank, level, last_login, uorder, notify_method, notify_mode, user_mailok;
    SQLDOUBLE timezone_offset;
    
    SQLINTEGER cbUname = SQL_NTS, cbName = SQL_NTS, cbEmail = SQL_NTS, cbUrl = SQL_NTS, cbUser_avatar = SQL_NTS, cbUser_icq = SQL_NTS, cbUser_from = SQL_NTS, cbUser_sig = SQL_NTS, cbActkey = SQL_NTS, cbUser_aim = SQL_NTS, cbUser_yim = SQL_NTS, cbUser_msnm = SQL_NTS, cbPass = SQL_NTS, cbTheme = SQL_NTS, cbUmode = SQL_NTS, cbUser_occ = SQL_NTS, cbBio = SQL_NTS, cbUser_intrest = SQL_NTS;
    SQLINTEGER cbUser_regdate = 0, cbUser_viewemail = 0, cbPosts = 0, cbAttachsig = 0, cbRank = 0, cbLevel = 0, cbLast_login = 0, cbUorder = 0, cbNotify_method = 0, cbNotify_mode = 0, cbUser_mailok = 0, cbTimezone_offset = 0;

    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        string sql;
        sql = "INSERT INTO " + dbprefix + "_users (uname, name, email, url, user_avatar, user_regdate, user_icq, user_from, user_sig, user_viewemail, actkey, user_aim, user_yim, user_msnm, pass, posts, attachsig, rank, level, theme, timezone_offset, last_login, umode, uorder, notify_method, notify_mode, user_occ, bio, user_intrest, user_mailok) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)";
        sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
        if( sqlcode == SQL_SUCCESS || sqlcode == SQL_SUCCESS_WITH_INFO ){
            SQLBindParameter(hstmt,  1, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_UNAME_LEN, 0, uname, 0, &cbUname );
            SQLBindParameter(hstmt,  2, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_NAME_LEN, 0, name, 0, &cbName );
            SQLBindParameter(hstmt,  3, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_EMAIL_LEN, 0, email, 0, &cbEmail );
            SQLBindParameter(hstmt,  4, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_URL_LEN, 0, url, 0, &cbUrl );
            SQLBindParameter(hstmt,  5, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_AVATAR_LEN, 0, user_avatar, 0, &cbUser_avatar );
            SQLBindParameter(hstmt,  6, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &user_regdate, 0, &cbUser_regdate );
            SQLBindParameter(hstmt,  7, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_ICQ_LEN, 0, user_icq, 0, &cbUser_icq );
            SQLBindParameter(hstmt,  8, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_FROM_LEN, 0, user_from, 0, &cbUser_from );
            SQLBindParameter(hstmt,  9, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_SIG_LEN, 0, user_sig, 0, &cbUser_sig );
            SQLBindParameter(hstmt, 10, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &user_viewemail, 0, &cbUser_viewemail );
            SQLBindParameter(hstmt, 11, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_ACTKEY_LEN, 0, actkey, 0, &cbActkey );
            SQLBindParameter(hstmt, 12, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_AIM_LEN, 0, user_aim, 0, &cbUser_aim );
            SQLBindParameter(hstmt, 13, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_YIM_LEN, 0, user_yim, 0, &cbUser_yim );
            SQLBindParameter(hstmt, 14, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_MSNM_LEN, 0, user_msnm, 0, &cbUser_msnm );
            SQLBindParameter(hstmt, 15, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_PASS_LEN, 0, pass, 0, &cbPass );
            SQLBindParameter(hstmt, 16, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &posts, 0, &cbPosts );
            SQLBindParameter(hstmt, 17, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &attachsig, 0, &cbAttachsig );
            SQLBindParameter(hstmt, 18, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &rank, 0, &cbRank );
            SQLBindParameter(hstmt, 19, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &level, 0, &cbLevel );
            SQLBindParameter(hstmt, 20, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_THEME_LEN, 0, theme, 0, &cbTheme );
            SQLBindParameter(hstmt, 21, SQL_PARAM_INPUT, SQL_C_DOUBLE, SQL_DOUBLE, 0, 0, &timezone_offset, 0, &cbTimezone_offset );
            SQLBindParameter(hstmt, 22, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &last_login, 0, &cbLast_login );
            SQLBindParameter(hstmt, 23, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_UMODE_LEN, 0, umode, 0, &cbUmode );
            SQLBindParameter(hstmt, 24, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &uorder, 0, &cbUorder );
            SQLBindParameter(hstmt, 25, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &notify_method, 0, &cbNotify_method );
            SQLBindParameter(hstmt, 26, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &notify_mode, 0, &cbNotify_mode );
            SQLBindParameter(hstmt, 27, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_OCC_LEN, 0, user_occ, 0, &cbUser_occ );
            SQLBindParameter(hstmt, 28, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_BIO_LEN, 0, bio, 0, &cbBio );
            SQLBindParameter(hstmt, 29, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_INTREST_LEN, 0, user_intrest, 0, &cbUser_intrest );
            SQLBindParameter(hstmt, 30, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &user_mailok, 0, &cbUser_mailok );

            strncpy2( (char*)uname, account -> getUname( ), ACCOUNT_UNAME_LEN );
            strncpy2( (char*)name, account -> getName( ), ACCOUNT_NAME_LEN );
            strncpy2( (char*)email, account -> getEmail( ), ACCOUNT_EMAIL_LEN );
            strncpy2( (char*)url, account -> getURL( ), ACCOUNT_URL_LEN );
            strncpy2( (char*)user_avatar, account -> getUserAvatar( ), ACCOUNT_USER_AVATAR_LEN );
            user_regdate = time( NULL );
            strncpy2( (char*)user_icq, account -> getUserIcq( ), ACCOUNT_USER_ICQ_LEN );
            strncpy2( (char*)user_from, account -> getUserFrom( ), ACCOUNT_USER_FROM_LEN );
            strncpy2( (char*)user_sig, account -> getUserSig( ), ACCOUNT_USER_SIG_LEN );
            user_viewemail = account -> getUserViewemail( );
            strncpy2( (char*)actkey, account -> getActkey( ), ACCOUNT_ACTKEY_LEN );
            strncpy2( (char*)user_aim, account -> getUserAim( ), ACCOUNT_USER_AIM_LEN );
            strncpy2( (char*)user_yim, account -> getUserYim( ), ACCOUNT_USER_YIM_LEN );
            strncpy2( (char*)user_msnm, account -> getUserMsnm( ), ACCOUNT_USER_MSNM_LEN );
            strncpy2( (char*)pass, account -> getPass( ), ACCOUNT_PASS_LEN );
            posts = account -> getPosts( );
            attachsig = account -> getAttachsig( );
            rank = account -> getRank( );
            level = account -> getLevel( );
            strncpy2( (char*)theme, account -> getTheme( ), ACCOUNT_THEME_LEN );
            timezone_offset = account -> getTimezoneOffset( );
            last_login = 0;
            strncpy2( (char*)umode, account -> getUmode( ), ACCOUNT_UMODE_LEN );
            uorder = account -> getUorder( );
            notify_method = account -> getNotifyMethod( );
            notify_mode = account -> getNotifyMode( );
            strncpy2( (char*)user_occ, account -> getUserOcc( ), ACCOUNT_USER_OCC_LEN );
            strncpy2( (char*)bio, account -> getBio( ), ACCOUNT_BIO_LEN );
            strncpy2( (char*)user_intrest, account -> getUserIntrest( ), ACCOUNT_USER_INTREST_LEN );
            user_mailok = account -> getUserMailok( );

            if( ( sqlcode = SQLExecute( hstmt ) ) == SQL_SUCCESS ){
                SQLINTEGER count = 0;
                if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                    //???若??D????緇?????
                    SQLHANDLE hstmt2 = NULL;
                    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt2 ) ) == SQL_SUCCESS ) {
                        sql = "SELECT LAST_INSERT_ID()"; // MySQL
                        // sql = "SELECT LAST_INSERT_ROWID()"; // SQLite
                        if( ( sqlcode = SQLExecDirect( hstmt2, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
                            SQLUINTEGER last_insert_id;
                            SQLINTEGER len;
                            SQLBindCol( hstmt2, 1, SQL_C_ULONG, &last_insert_id, 0, &len );
                            if( ( sqlcode = SQLFetch( hstmt2 ) ) == SQL_SUCCESS ){
                                *uid = last_insert_id;
                                ret = RES_OK;
                            }else{
                                ret = RES_DB_QUERY_ERROR;
                                string s( "SQLFetch in insertAccount " );
                                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                                setLastErrorString( s.c_str( ) );
                            }
                        }else{
                            string s( "SQLExecDirect in insertAccount " );
                            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                            setLastErrorString( s.c_str( ) );
                            ret = RES_DB_QUERY_ERROR;
                        }
                        SQLFreeHandle( SQL_HANDLE_STMT, hstmt2 );
                    }
                }else{
                    string s( "SQLRowCount in insertAccount sql=" );
                    s += string( sql );
                    setLastErrorString( s.c_str( ) );
                    ret = RES_DB_QUERY_ERROR;
                }
            }else{
                string s( "SQLExecute in insertAccount " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            string s( "SQLPrepare in insertAccount " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            setLastErrorString( s.c_str( ) );
            ret = RES_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in insertAccount" );
        ret = RES_ERROR;
    }
    
    if( ret == RES_OK ){
        //2.xnpaccount?????若?吟???若??????????????宴???吾??莨若??
        SQLUINTEGER activate;
        SQLCHAR address[XNP_ACCOUNT_ADDRESS_LEN+1];
        SQLCHAR division[XNP_ACCOUNT_DIVISION_LEN+1];
        SQLCHAR tel[XNP_ACCOUNT_TEL_LEN+1];
        SQLCHAR company_name[XNP_ACCOUNT_COMPANY_NAME_LEN+1];
        SQLCHAR country[XNP_ACCOUNT_COUNTRY_LEN+1];
        SQLCHAR zipcode[XNP_ACCOUNT_ZIPCODE_LEN+1];
        SQLCHAR fax[XNP_ACCOUNT_FAX_LEN+1];
        SQLCHAR base_url[XNP_ACCOUNT_BASE_URL_LEN+1];
        SQLINTEGER cbAddress = SQL_NTS, cbDivision = SQL_NTS, cbTel = SQL_NTS, cbCompany_name = SQL_NTS, cbCountry = SQL_NTS, cbZipcode = SQL_NTS, cbFax = SQL_NTS, cbBase_url = SQL_NTS;
        SQLINTEGER cbUid = 0, cbActivate = 0, cbNotice_mail = 0, cbNotice_mail_since = 0;
        SQLUINTEGER notice_mail;
        SQLUINTEGER notice_mail_since;
        if( ret == RES_OK && ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
            string sql;
            sql = "INSERT INTO " + dbprefix + "_xnpaccount_users (uid, activate, address, division, tel, company_name, country, zipcode, fax, base_url, notice_mail, notice_mail_since) VALUES ( ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ? )";
            sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
            if( sqlcode == SQL_SUCCESS || sqlcode == SQL_SUCCESS_WITH_INFO ){
                SQLBindParameter(hstmt, 1, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, uid, 0, &cbUid);
                SQLBindParameter(hstmt, 2, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &activate, 0, &cbActivate);
                SQLBindParameter(hstmt, 3, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_ADDRESS_LEN, 0, address, 0, &cbAddress); 
                SQLBindParameter(hstmt, 4, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_DIVISION_LEN, 0, division, 0, &cbDivision); 
                SQLBindParameter(hstmt, 5, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_TEL_LEN, 0, tel, 0, &cbTel); 
                SQLBindParameter(hstmt, 6, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_COMPANY_NAME_LEN, 0, company_name, 0, &cbCompany_name); 
                SQLBindParameter(hstmt, 7, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_COUNTRY_LEN, 0, country, 0, &cbCountry); 
                SQLBindParameter(hstmt, 8, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_ZIPCODE_LEN, 0, zipcode, 0, &cbZipcode); 
                SQLBindParameter(hstmt, 9, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_FAX_LEN, 0, fax, 0, &cbFax); 
                SQLBindParameter(hstmt, 10, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_BASE_URL_LEN, 0, base_url, 0, &cbBase_url); 
                SQLBindParameter(hstmt, 11, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &notice_mail, 0, &cbNotice_mail);
                SQLBindParameter(hstmt, 12, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &notice_mail_since, 0, &cbNotice_mail_since);
            
                activate = account -> getActivate() ? 1 : 0;
                strncpy2( (char*)address, account -> getAddress(), XNP_ACCOUNT_ADDRESS_LEN );
                strncpy2( (char*)division, account -> getDivision(), XNP_ACCOUNT_DIVISION_LEN );
                strncpy2( (char*)tel, account -> getTel(), XNP_ACCOUNT_TEL_LEN );
                strncpy2( (char*)company_name, account -> getCompanyName(), XNP_ACCOUNT_COMPANY_NAME_LEN );
                strncpy2( (char*)country, account -> getCountry(), XNP_ACCOUNT_COUNTRY_LEN );
                strncpy2( (char*)zipcode, account -> getZipcode(), XNP_ACCOUNT_ZIPCODE_LEN );
                strncpy2( (char*)fax, account -> getFax(), XNP_ACCOUNT_FAX_LEN );
                strncpy2( (char*)base_url, account -> getBaseURL(), XNP_ACCOUNT_BASE_URL_LEN );
                notice_mail = account -> getNoticeMail( );
                notice_mail_since = account -> getNoticeMailSince( );
            
                if( ( sqlcode = SQLExecute( hstmt ) ) == SQL_SUCCESS ){
                    SQLINTEGER count = 0;
                    if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                        ret = RES_OK;
                        if( ret == RES_OK ){
                            //3.add new user to default group(not a group admin)
                            ret = insertMember( sid, group_t::GID_DEFAULT, *uid, false );
                        }else{
                            //xoops_users??nsert???????潟?若???????ゃ????
                            sql = "DELETE FROM " + dbprefix + "_users where uid=";
                            sql += unsignedIntToString( *uid );
                            SQLHANDLE hstmt2 = NULL;
                            if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt2 ) ) == SQL_SUCCESS ) {
                                SQLExecDirect( hstmt2, (SQLCHAR*)sql.c_str(), sql.length() );
                                SQLFreeHandle( SQL_HANDLE_STMT, hstmt2 );
                            }
                            setLastErrorString( "insertMember in insertAccount" );
                            ret = RES_DB_QUERY_ERROR;
                        }
                    }else{
                        string s( "SQLRowCount in insertAccount sql=" );
                        s += string( sql );
                        setLastErrorString( s.c_str( ) );
                        ret = RES_DB_QUERY_ERROR;
                    }
                }else{
                    string s( "SQLExecute in insertAccount " );
                    s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                    setLastErrorString( s.c_str( ) );
                    ret = RES_DB_QUERY_ERROR;
                }
            }else{
                //xoops_users??nsert???????潟?若???????ゃ????
                sql = "DELETE FROM " + dbprefix + "_users where uid=";
                sql += unsignedIntToString( *uid );
                SQLHANDLE hstmt2 = NULL;
                if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt2 ) ) == SQL_SUCCESS ) {
                    SQLExecDirect( hstmt2, (SQLCHAR*)sql.c_str(), sql.length() );
                    SQLFreeHandle( SQL_HANDLE_STMT, hstmt2 );
                }
                string s( "SQLExecDirect in insertAccount sql=" );
                s += string( sql );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
            SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
        }else{
            setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in insertAccount" );
            ret = RES_ERROR;
        }
    }
    
    if ( ret == RES_OK ){
        //4.private index??篏???
        
        // private index????ort_number????
        string sql = "select min(sort_number) from " + 
          dbprefix + "_xnpaccount_index where parent_index_id=" + unsignedIntToString(item::IID_ROOT) + 
          " and open_level=" + unsignedIntToString(index::OL_PRIVATE);
        unsigned int sortNumber;
        ret = queryGetUnsignedInt( "insertAccount", sql, &sortNumber );
        sortNumber--;
        if ( ret == RES_OK ){
            // private index篏???
            index_t index;
            index.setItemTypeID(item::ITID_INDEX);
            index.setContributorUID(*uid);
            index.setParentIndexID(item::IID_ROOT);
            index.setOwnerUID(*uid);
            index.setOpenLevel(index::OL_PRIVATE);
            index.setSortNumber(sortNumber);
            index.setTitle(account->getUname());
            indexid_t privateXID;
            ret = insertIndexInternal( sid, &index, &privateXID );
            if ( ret == RES_OK ){
                // xnpaccuont_users??rivate_index_id???吾??????
                sql = "UPDATE " + dbprefix + "_xnpaccount_users SET private_index_id=" 
                  + unsignedIntToString(privateXID) + " WHERE uid=" + unsignedIntToString(*uid);
                ret = querySimple( "insertAccount", sql );
            }
        }
    }
    
    return ret;
}

/**
 * 
 * ?≪?????潟?????宴??紊??眼????.
 * 
 * 
 * @param sid ?祉???激?с??D
 * @param account 紊??眼???????≪?????潟??????/span>
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * @return RES_NO_SUCH_USER
 * @return RES_ERROR
 * 
 */
result_t updateAccount( sessionid_t sid, const account_t* account )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( account == NULL ) return RES_ERROR;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !uidExists( account -> getUID( ) ) ) return RES_NO_SUCH_USER;

    SQLRETURN sqlcode;
    result_t ret = RES_ERROR;
    SQLHANDLE hstmt = NULL;
    
    //xoops?????若?吟???若???????吾??莨若??
    SQLCHAR uname[ACCOUNT_UNAME_LEN+1], name[ACCOUNT_NAME_LEN+1], email[ACCOUNT_EMAIL_LEN+1], url[ACCOUNT_URL_LEN+1], user_avatar[ACCOUNT_USER_AVATAR_LEN+1], user_icq[ACCOUNT_USER_ICQ_LEN+1], user_from[ACCOUNT_USER_FROM_LEN+1], user_sig[ACCOUNT_USER_SIG_LEN+1], actkey[ACCOUNT_ACTKEY_LEN+1], user_aim[ACCOUNT_USER_AIM_LEN+1], user_yim[ACCOUNT_USER_YIM_LEN+1], user_msnm[ACCOUNT_USER_MSNM_LEN+1], pass[ACCOUNT_PASS_LEN+1], theme[ACCOUNT_THEME_LEN+1], umode[ACCOUNT_UMODE_LEN+1], user_occ[ACCOUNT_USER_OCC_LEN+1], bio[ACCOUNT_BIO_LEN+1], user_intrest[ACCOUNT_USER_INTREST_LEN+1];
    SQLINTEGER uid, user_regdate, user_viewemail, posts, attachsig, rank, level, last_login, uorder, notify_method, notify_mode, user_mailok;
    SQLDOUBLE timezone_offset;
    
    SQLINTEGER cbUname = SQL_NTS, cbName = SQL_NTS, cbEmail = SQL_NTS, cbUrl = SQL_NTS, cbUser_avatar = SQL_NTS, cbUser_icq = SQL_NTS, cbUser_from = SQL_NTS, cbUser_sig = SQL_NTS, cbActkey = SQL_NTS, cbUser_aim = SQL_NTS, cbUser_yim = SQL_NTS, cbUser_msnm = SQL_NTS, cbPass = SQL_NTS, cbTheme = SQL_NTS, cbUmode = SQL_NTS, cbUser_occ = SQL_NTS, cbBio = SQL_NTS, cbUser_intrest = SQL_NTS;
    SQLINTEGER cbUid = 0, cbUser_regdate = 0, cbUser_viewemail = 0, cbPosts = 0, cbAttachsig = 0, cbRank = 0, cbLevel = 0, cbLast_login = 0, cbUorder = 0, cbNotify_method = 0, cbNotify_mode = 0, cbUser_mailok = 0, cbTimezone_offset = 0;

    SQLUINTEGER activate;
    SQLCHAR address[XNP_ACCOUNT_ADDRESS_LEN+1];
    SQLCHAR division[XNP_ACCOUNT_DIVISION_LEN+1];
    SQLCHAR tel[XNP_ACCOUNT_TEL_LEN+1];
    SQLCHAR company_name[XNP_ACCOUNT_COMPANY_NAME_LEN+1];
    SQLCHAR country[XNP_ACCOUNT_COUNTRY_LEN+1];
    SQLCHAR zipcode[XNP_ACCOUNT_ZIPCODE_LEN+1];
    SQLCHAR fax[XNP_ACCOUNT_FAX_LEN+1];
    SQLCHAR base_url[XNP_ACCOUNT_BASE_URL_LEN+1];
    SQLINTEGER cbActivate = 0, cbAddress = SQL_NTS, cbDivision = SQL_NTS, cbTel = SQL_NTS, cbCompany_name = SQL_NTS, cbCountry = SQL_NTS, cbZipcode = SQL_NTS, cbFax = SQL_NTS, cbBase_url = SQL_NTS;
    SQLUINTEGER notice_mail, notice_mail_since;
    SQLINTEGER cbNotice_mail = 0, cbNotice_mail_since = 0;

    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        string sql;

        sql = "UPDATE " + dbprefix + "_users SET ";
        sql += "uname=?";
        sql += ", name=?";
        sql += ", email=?";
        sql += ", url=?";
        sql += ", user_avatar=?";
        sql += ", user_regdate=?";
        sql += ", user_icq=?";
        sql += ", user_from=?";
        sql += ", user_sig=?";
        sql += ", user_viewemail=?";
        sql += ", actkey=?";
        sql += ", user_aim=?";
        sql += ", user_yim=?";
        sql += ", user_msnm=?";
        sql += ", pass=?";
        sql += ", posts=?";
        sql += ", attachsig=?";
        sql += ", rank=?";
        sql += ", level=?";
        sql += ", theme=?";
        sql += ", timezone_offset=?";
        sql += ", last_login=?";
        sql += ", umode=?";
        sql += ", uorder=?";
        sql += ", notify_method=?";
        sql += ", notify_mode=?";
        sql += ", user_occ=?";
        sql += ", bio=?";
        sql += ", user_intrest=?";
        sql += ", user_mailok=? ";
        sql += " WHERE uid = ?";

        sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
        if( sqlcode == SQL_SUCCESS || sqlcode == SQL_SUCCESS_WITH_INFO ){
            SQLBindParameter(hstmt,  1, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_UNAME_LEN, 0, uname, 0, &cbUname );
            SQLBindParameter(hstmt,  2, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_NAME_LEN, 0, name, 0, &cbName );
            SQLBindParameter(hstmt,  3, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_EMAIL_LEN, 0, email, 0, &cbEmail );
            SQLBindParameter(hstmt,  4, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_URL_LEN, 0, url, 0, &cbUrl );
            SQLBindParameter(hstmt,  5, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_AVATAR_LEN, 0, user_avatar, 0, &cbUser_avatar );
            SQLBindParameter(hstmt,  6, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &user_regdate, 0, &cbUser_regdate );
            SQLBindParameter(hstmt,  7, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_ICQ_LEN, 0, user_icq, 0, &cbUser_icq );
            SQLBindParameter(hstmt,  8, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_FROM_LEN, 0, user_from, 0, &cbUser_from );
            SQLBindParameter(hstmt,  9, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_SIG_LEN, 0, user_sig, 0, &cbUser_sig );
            SQLBindParameter(hstmt, 10, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &user_viewemail, 0, &cbUser_viewemail );
            SQLBindParameter(hstmt, 11, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_ACTKEY_LEN, 0, actkey, 0, &cbActkey );
            SQLBindParameter(hstmt, 12, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_AIM_LEN, 0, user_aim, 0, &cbUser_aim );
            SQLBindParameter(hstmt, 13, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_YIM_LEN, 0, user_yim, 0, &cbUser_yim );
            SQLBindParameter(hstmt, 14, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_MSNM_LEN, 0, user_msnm, 0, &cbUser_msnm );
            SQLBindParameter(hstmt, 15, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_PASS_LEN, 0, pass, 0, &cbPass );
            SQLBindParameter(hstmt, 16, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &posts, 0, &cbPosts );
            SQLBindParameter(hstmt, 17, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &attachsig, 0, &cbAttachsig );
            SQLBindParameter(hstmt, 18, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &rank, 0, &cbRank );
            SQLBindParameter(hstmt, 19, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &level, 0, &cbLevel );
            SQLBindParameter(hstmt, 20, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_THEME_LEN, 0, theme, 0, &cbTheme );
            SQLBindParameter(hstmt, 21, SQL_PARAM_INPUT, SQL_C_DOUBLE, SQL_DOUBLE, 0, 0, &timezone_offset, 0, &cbTimezone_offset );
            SQLBindParameter(hstmt, 22, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &last_login, 0, &cbLast_login );
            SQLBindParameter(hstmt, 23, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_UMODE_LEN, 0, umode, 0, &cbUmode );
            SQLBindParameter(hstmt, 24, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &uorder, 0, &cbUorder );
            SQLBindParameter(hstmt, 25, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &notify_method, 0, &cbNotify_method );
            SQLBindParameter(hstmt, 26, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &notify_mode, 0, &cbNotify_mode );
            SQLBindParameter(hstmt, 27, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_OCC_LEN, 0, user_occ, 0, &cbUser_occ );
            SQLBindParameter(hstmt, 28, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_BIO_LEN, 0, bio, 0, &cbBio );
            SQLBindParameter(hstmt, 29, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_INTREST_LEN, 0, user_intrest, 0, &cbUser_intrest );
            SQLBindParameter(hstmt, 30, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &user_mailok, 0, &cbUser_mailok );
            SQLBindParameter(hstmt, 31, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &uid, 0, &cbUid );
            
            strncpy2( (char*)uname, account -> getUname( ), ACCOUNT_UNAME_LEN );
            strncpy2( (char*)name, account -> getName( ), ACCOUNT_NAME_LEN );
            strncpy2( (char*)email, account -> getEmail( ), ACCOUNT_EMAIL_LEN );
            strncpy2( (char*)url, account -> getURL( ), ACCOUNT_URL_LEN );
            strncpy2( (char*)user_avatar, account -> getUserAvatar( ), ACCOUNT_USER_AVATAR_LEN );
            user_regdate = time( NULL );
            strncpy2( (char*)user_icq, account -> getUserIcq( ), ACCOUNT_USER_ICQ_LEN );
            strncpy2( (char*)user_from, account -> getUserFrom( ), ACCOUNT_USER_FROM_LEN );
            strncpy2( (char*)user_sig, account -> getUserSig( ), ACCOUNT_USER_SIG_LEN );
            user_viewemail = account -> getUserViewemail( );
            strncpy2( (char*)actkey, account -> getActkey( ), ACCOUNT_ACTKEY_LEN );
            strncpy2( (char*)user_aim, account -> getUserAim( ), ACCOUNT_USER_AIM_LEN );
            strncpy2( (char*)user_yim, account -> getUserYim( ), ACCOUNT_USER_YIM_LEN );
            strncpy2( (char*)user_msnm, account -> getUserMsnm( ), ACCOUNT_USER_MSNM_LEN );
            strncpy2( (char*)pass, account -> getPass( ), ACCOUNT_PASS_LEN );
            posts = account -> getPosts( );
            attachsig = account -> getAttachsig( );
            rank = account -> getRank( );
            level = account -> getLevel( );
            strncpy2( (char*)theme, account -> getTheme( ), ACCOUNT_THEME_LEN );
            timezone_offset = account -> getTimezoneOffset( );
            last_login = 0;
            strncpy2( (char*)umode, account -> getUmode( ), ACCOUNT_UMODE_LEN );
            uorder = account -> getUorder( );
            notify_method = account -> getNotifyMethod( );
            notify_mode = account -> getNotifyMode( );
            strncpy2( (char*)user_occ, account -> getUserOcc( ), ACCOUNT_USER_OCC_LEN );
            strncpy2( (char*)bio, account -> getBio( ), ACCOUNT_BIO_LEN );
            strncpy2( (char*)user_intrest, account -> getUserIntrest( ), ACCOUNT_USER_INTREST_LEN );
            user_mailok = account -> getUserMailok( );
            uid = account -> getUID( );
            
            if( ( sqlcode = SQLExecute( hstmt ) ) == SQL_SUCCESS ){
                SQLINTEGER count = 0;
                if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                    ret = RES_OK;
                }else{
                    string s( "SQLRowCount in updateAccount sql=" );
                    s += string( sql );
                    setLastErrorString( s.c_str( ) );
                    ret = RES_DB_QUERY_ERROR;
                }
            }else{
                string s( "SQLExecute in updateAccount 1 " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            setLastErrorString( "SQLPrepare in updateAccount sql=" );
            ret = RES_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
        hstmt = NULL;
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in updateAccount" );
        ret = RES_ERROR;
    }
    
    if( ret != RES_OK ){
        return ret;
    }
    
    //xnpaccount?????若?吟???若??????????????宴??筝??吾??????
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        string sql;

        sql = "UPDATE " + dbprefix + "_xnpaccount_users SET ";
        sql += "activate=?, ";
        sql += "address=?, ";
        sql += "division=?, ";
        sql += "tel=?, ";
        sql += "company_name=?, ";
        sql += "country=?, ";
        sql += "zipcode=?, ";
        sql += "fax=?, ";
        sql += "base_url=?, ";
        sql += "notice_mail=?, ";
        sql += "notice_mail_since=? ";
        sql += "WHERE uid=?"; 
    
        sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
        if( sqlcode == SQL_SUCCESS || sqlcode == SQL_SUCCESS_WITH_INFO ){
            SQLBindParameter(hstmt, 1, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &activate, 0, &cbActivate);
            SQLBindParameter(hstmt, 2, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_ADDRESS_LEN, 0, address, 0, &cbAddress); 
            SQLBindParameter(hstmt, 3, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_DIVISION_LEN, 0, division, 0, &cbDivision); 
            SQLBindParameter(hstmt, 4, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_TEL_LEN, 0, tel, 0, &cbTel); 
            SQLBindParameter(hstmt, 5, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_COMPANY_NAME_LEN, 0, company_name, 0, &cbCompany_name); 
            SQLBindParameter(hstmt, 6, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_COUNTRY_LEN, 0, country, 0, &cbCountry); 
            SQLBindParameter(hstmt, 7, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_ZIPCODE_LEN, 0, zipcode, 0, &cbZipcode); 
            SQLBindParameter(hstmt, 8, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_FAX_LEN, 0, fax, 0, &cbFax); 
            SQLBindParameter(hstmt, 9, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_BASE_URL_LEN, 0, base_url, 0, &cbBase_url); 
            SQLBindParameter(hstmt, 10, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &notice_mail, 0, &cbNotice_mail);
            SQLBindParameter(hstmt, 11, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &notice_mail_since, 0, &cbNotice_mail_since);
            SQLBindParameter(hstmt, 12, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &uid, 0, &cbUid );
            
            activate = account -> getActivate() ? 1 : 0;
            strncpy2( (char*)address, account -> getAddress( ) , XNP_ACCOUNT_ADDRESS_LEN );
            strncpy2( (char*)division, account -> getDivision(), XNP_ACCOUNT_DIVISION_LEN );
            strncpy2( (char*)tel, account -> getTel(), XNP_ACCOUNT_TEL_LEN );
            strncpy2( (char*)company_name, account -> getCompanyName(), XNP_ACCOUNT_COMPANY_NAME_LEN );
            strncpy2( (char*)country, account -> getCountry(), XNP_ACCOUNT_COUNTRY_LEN );
            strncpy2( (char*)zipcode, account -> getZipcode(), XNP_ACCOUNT_ZIPCODE_LEN );
            strncpy2( (char*)fax, account -> getFax(), XNP_ACCOUNT_FAX_LEN );
            strncpy2( (char*)base_url, account -> getBaseURL(), XNP_ACCOUNT_BASE_URL_LEN );
            notice_mail = account -> getNoticeMail( );
            notice_mail_since = account -> getNoticeMailSince( );
            uid = account -> getUID( );
            
            if( ( sqlcode = SQLExecute( hstmt ) ) == SQL_SUCCESS ){
                SQLINTEGER count = 0;
                if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                    ret = RES_OK;
                }else{
                    string s( "SQLRowCount in updateAccount sql=" );
                    s += string( sql );
                    setLastErrorString( s.c_str( ) );
                    ret = RES_DB_QUERY_ERROR;
                }
            }else{
                string s( "SQLExecute in updateAccount 2 " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            setLastErrorString( "SQLPrepare in updateAccount sql=" );
            ret = RES_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in updateAccount" );
        ret = RES_ERROR;
    }
    return ret;
}

/**
 * 
 * criteria_t?ф??絎???????膀??蚊?????若??D??菴???.
 * ???若??D????????腆坂????????????吾??莨若?随????????≪?????鴻??*uids???吾??莨若??.
 * ???????泣?ゃ?冴??*uidsLen???吾??莨若??
 * 
 * @param sid ?祉???激?с??D
 * @param cri 腟???????我??絎?鐚??純?若???＞散??絎?
 * @param uids ???若?吟??ID?????????阪????
 * @param uidsLen uids???????膣??違???阪????
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t dumpUids( sessionid_t sid, criteria_t* cri, userid_t** uids, int* uidsLen )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
#ifdef USE_SYSLOG
    openlog( "commonal", LOG_ODELAY, LOG_USER );
#endif
    
    result_t ret = RES_ERROR;
    userid_t* dst = 0;
    string sql;
    SQLRETURN sqlcode;
    SQLINTEGER count = 0;
            

    sql = "SELECT uid FROM " + dbprefix + "_xnpaccount_users ";
    sql += criteria2str( cri );
    if( countResultRows( sql.c_str(), &count ) == RES_OK ){
        *uidsLen = count;
        dst = new userid_t[ *uidsLen ];
        *uids = dst;
    }else{
        return RES_ERROR;
    }
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            userid_t uid;
            SQLINTEGER len = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &uid, 0, &len );

            for( int i = 0; ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS && i < *uidsLen ; i++ ){
                dst[ i ] = uid;
            }
            
#ifdef USE_SYSLOG
            syslog( LOG_DEBUG, "dumpUids succeed" );
#endif
            ret = RES_OK;
        }else{
            string s( "SQLExecDirect in dumpUids " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += "sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
#ifdef USE_SYSLOG
            syslog( LOG_DEBUG, "dumpUids %s", getLastErrorString( ) );
#endif
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in dumpUids" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
#ifdef USE_SYSLOG
        syslog( LOG_DEBUG, "dumpUids %s", getLastErrorString( ) );
#endif
        ret = RES_DB_QUERY_ERROR;
    }
    return ret;
}

/**
 * 
 * ?違???若???違??菴???.
 * 筝?罩ｃ???祉???激?с??D????0??菴???.
 * 
 * @param sid ?祉???激?с??D
 * @return ?違???若????/span>
 * 
 */
int getGroupCount( sessionid_t sid )
{
    if( hdbc == NULL ) return 0;
    if( !isValidSessionID( sid ) ) return 0;
    
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    string sql;
    int ret = 0;
    
    //?違???若???違??羆?????
    sql = "SELECT COUNT(*) FROM " + dbprefix + "_xnpaccount_groups";
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLUINTEGER count = 0;
            SQLINTEGER len;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &count, 0, &len );
            if( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                ret = count;
            }else {
                string s( "SQLFetch in getGroupCount sql=" );
                s += string( sql );
                setLastErrorString( s.c_str( ) );
                ret = 0;
            }
        }else{
            setLastErrorString( "SQLExecDirect in getGroupCount" );
            ret = 0;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in getGroupCount" );
        ret = 0;
    }
    return ret;
}

/**
 * 
 * ??絮??違???若??筝?荀у??.
 * ???若?吟????絮??????????違???若????D????緇?????
 * 
 * @param sid ?祉???激?с??D
 * @param uid ???若?吟??ID
 * @param cri 腟???????我??絎?鐚??純?若???＞散??絎?
 * @param gids ?違???若??ID?????????阪????
 * @param gidsLen gids???????膣??違???阪????
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_USER
 * @return RES_DB_QUERY_ERROR
 * @return RES_OK
 * 
 */
result_t getGroupsByUid( sessionid_t sid, userid_t uid, criteria_t* cri, groupid_t** gids, int* gidsLen )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !uidExists( uid ) ) return RES_NO_SUCH_USER; //uid??????????с????/span>
    
    result_t ret = RES_ERROR;
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    SQLINTEGER count = 0;
    groupid_t* dst = 0;
    int len = 0;
    
    sql = "SELECT gid FROM " + dbprefix + "_xnpaccount_groups_users_link";
    sql += " WHERE uid=" + string( unsignedIntToString( uid ) );
    sql += criteria2str( cri );
    if( countResultRows( sql.c_str(), &count ) == RES_OK ){
        *gidsLen = count;
        dst = new groupid_t[ *gidsLen ];
        *gids = dst;
    }else{
        return RES_ERROR;
    }
    
    //??絮??????違???若??????紊у???違??羆?????
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            if( count > 0 ){
                SQLHANDLE hstmt2 = NULL;    
                if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt2 ) ) == SQL_SUCCESS ) {
                    sql = "SELECT gid, uid, is_admin FROM " + dbprefix + "_xnpaccount_groups_users_link";
                    sql += " WHERE uid=" + string( unsignedIntToString( uid ) );
                    sql += criteria2str( cri );
                    if( ( sqlcode = SQLExecDirect( hstmt2, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
                        SQLINTEGER len;
                        groupid_t gid = 0;
                        SQLBindCol( hstmt, 1, SQL_C_ULONG, &gid, 0, &len );
                        for( int i = 0; ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS && i < *gidsLen ; i++ ){
                            dst[ i ] = gid;
                        }
                        ret = RES_OK;
                    }else{
                        string s( "SQLExecDirect in getGroupsByUid " );
                        s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                        s += string( ", sql=" ) + string( sql );
                        ret = RES_DB_QUERY_ERROR;
                    }
                }else{
                    string s( "SQLAllocHandle in getGroupsByUid " );
                    s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
                    ret = RES_DB_QUERY_ERROR;
                }
            }else{
                ret = RES_OK;
            }
        }else{
            string s( "SQLExecDirect in getGroupsByUid " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += string( ", sql=" ) + string( sql );
            ret = RES_DB_QUERY_ERROR;
        }
    }else{
        string s( "SQLAllocHandle in getGroupsByUid " );
        setLastErrorString( s.c_str( ) );
        ret = RES_DB_QUERY_ERROR;
    }
    return ret;
}

/**
 * 
 * ?違???若??膊∞??罔????????.
 * ???若?吟?????若???????罔???????????(?違???若??膊∞?????с??????)????????????.
 * ???若?吟???違???若????絖????????????????医幻???翫??鐚?false??菴???.
 * 
 * @param sid ?祉???激?с??D
 * @param gid ?違???若????ID
 * @param uid ???若?吟??ID
 * @return true 膊∞??罔???????
 * @return false 膊∞??罔???????鐚??障???????/span>
 * 
 */
bool isGroupAdmin( sessionid_t sid, groupid_t gid, userid_t uid )
{
    if( hdbc == NULL ) return false;
    if( !isValidSessionID( sid ) ) return false;
    if( !uidExists( uid ) ) return false;
    if( !gidExists( gid ) ) return false;
    
    bool ret = false;
    string sql;
    SQLRETURN sqlcode;
    SQLINTEGER count = 0;
    
    sql = "SELECT * FROM " + dbprefix + "_xnpaccount_groups_users_link ";
    sql += "WHERE gid=" + string( unsignedIntToString( gid ) );
    sql += " AND uid=" + string( unsignedIntToString( uid ) );
    sql += " AND is_admin=1";
    if( countResultRows( sql.c_str(), &count ) == RES_OK ){
        if( count > 0 ){
            ret = true;
        }else{
            ret = false;
        }
    }else{
        ret = false;
    }
    return ret;
}

/**
 * 
 * ?違???若??ID筝?荀?
 * ?脂?蚊???????????違???若????D筝?荀с????緇?????.
 * 
 * @param sid ?祉???激?с??D
 * @param cri 腟???????我??絎?鐚??純?若???＞散??絎?
 * @param gids ?違???若??ID?????????阪????
 * @param gidsLen gids???????膣??違???阪????
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * @return RES_OK
 * 
 */
result_t dumpGids( sessionid_t sid, criteria_t* cri, groupid_t** gids, int* gidsLen )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    result_t ret = RES_ERROR;
    groupid_t* dst = 0;
    string sql;
    SQLRETURN sqlcode;
    SQLINTEGER count = 0;
            
    sql = "SELECT gid FROM " + dbprefix + "_xnpaccount_groups ";
    sql += criteria2str( cri );
    if( countResultRows( sql.c_str(), &count ) == RES_OK ){
        *gidsLen = count;
        dst = new groupid_t[ *gidsLen ];
        *gids = dst;
    }else{
        return RES_ERROR;
    }
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            groupid_t gid;
            SQLINTEGER len = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &gid, 0, &len );
            for( int i = 0; ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS && i < *gidsLen ; i++ ){
                dst[ i ] = gid;
            }
            
            ret = RES_OK;
        }else{
            string s( "SQLExecDirect in dumpGids " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += "sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }
    return ret;
}

/**
 * 
 * ?違???若??膊∞????ID????緇?????.
 * ?????違???若??????????????若??D????緇?????.
 * 
 * @param sid ?祉???激?с??D
 * @param gid ???????????違???若????ID?ф??絎?????
 * @param cri 腟???????我??絎?鐚??純?若???＞散??絎?
 * @param uids 膊∞??????ID???????????????????ゃ?潟??/span>
 * @param uidsLen uids???????膣???/span>
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * @return RES_ERROR 
 * 
 */
result_t dumpGroupAdmins( sessionid_t sid, groupid_t gid, criteria_t* cri, userid_t** uids, int* uidsLen )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    result_t ret = RES_ERROR;
    groupid_t* dst = 0;
    string sql;
    SQLRETURN sqlcode;
    SQLINTEGER count = 0;
            
    sql = "SELECT uid FROM " + dbprefix + "_xnpaccount_groups_users_link ";
    sql += " WHERE is_admin=1 and gid=" + unsignedIntToString( gid );
    if( countResultRows( sql.c_str(), &count ) == RES_OK ){
        *uidsLen = count;
        *uids = new groupid_t[ *uidsLen ];
    }else{
        return RES_ERROR;
    }
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            userid_t uid;
            SQLINTEGER len = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &uid, 0, &len );
            for( int i = 0; ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS && i < *uidsLen ; i++ ){
                (*uids)[ i ] = uid;
            }
            ret = RES_OK;
        }else{
            string s( "SQLExecDirect in dumpGroupAdmins " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += "sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }
    return ret;
}

/**
 * 
 * ?違???若????絮????若?九????
 * ?違???若??????絮????????若?吟??鐚??違???若?????????ゃ????.
 * ???????????違???若???????????ゃ?с??????
 * 
 * @param sid ?祉???激?с??D
 * @param gid ?????違???若?????????ゃ??????????絎??????違???若??ID
 * @param uid ???ゅ?莟＜?????若?吟??D
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_USER
 * @return RES_NO_SUCH_GROUP
 * @return RES_DB_QUERY_ERROR
 * @return RES_OK
 * @return RES_ERROR
 * 
 */
result_t deleteMember( sessionid_t sid, groupid_t gid, userid_t uid )
{
    if( gid == group_t::GID_DEFAULT ) return RES_ERROR;
    return deleteMemberNoLimit( sid, gid, uid );
}

/**
 * 
 * ?違???若????絮????若?九????
 * ?違???若??????絮????????若?吟??鐚??違???若?????????ゃ????.
 * ???????????違???若???????????ゃ?с?????鴻??鐚?deleteMember???違????
 * 
 * @param sid ?祉???激?с??D
 * @param gid ?????違???若?????????ゃ??????????絎??????違???若??ID
 * @param uid ???ゅ?莟＜?????若?吟??D
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_USER
 * @return RES_NO_SUCH_GROUP
 * @return RES_DB_QUERY_ERROR
 * @return RES_OK
 * @return RES_ERROR
 * 
 */
static result_t deleteMemberNoLimit( sessionid_t sid, groupid_t gid, userid_t uid )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !uidExists( uid ) ) return RES_NO_SUCH_USER; //uid??????????с????/span>
    if( !gidExists( gid ) ) return RES_NO_SUCH_GROUP; //gid??????????с????/span>
    
    result_t ret = RES_ERROR;
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    
    sql = "DELETE FROM " + dbprefix + "_xnpaccount_groups_users_link ";
    sql += "WHERE gid=" + string( unsignedIntToString( gid ) );
    sql += " AND uid=" + string( unsignedIntToString( uid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLINTEGER count = 0;
            if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                ret = RES_OK;
            }else{
                string s( "SQLRowCount in deleteMember" );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret = RES_NO_SUCH_USER;
            }
        }else{
            string s( "SQLExecDirect in deleteMember" );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += ", sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in deleteMember" );
        ret = RES_ERROR;
    }
    return ret;
}

/**
 * 
 * ?違???若????絮????若?区申??.
 * ?違???若?????＜?潟???若?????若?吟??菴遵??????.
 * 
 * @param sid ?祉???激?с??D
 * @param gid ??絮????違???若????D
 * @param uid ??絮??????????若?吟??D
 * @param admin 膊∞????罔?????筝?????????true
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_USER
 * @return RES_NO_SUCH_GROUP
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t insertMember( sessionid_t sid, groupid_t gid, userid_t uid, bool admin )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !uidExists( uid ) ) return RES_NO_SUCH_USER; //uid??????????с????/span>
    if( !gidExists( gid ) ) return RES_NO_SUCH_GROUP; //gid??????????с????/span>
    
    result_t ret = RES_ERROR;
    string sql;
    SQLRETURN sqlcode;
    
    //?＜?潟???若??菴遵??
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        sql = "INSERT INTO " + dbprefix + "_xnpaccount_groups_users_link ( gid, uid, is_admin ) VALUES (";
        sql += string( unsignedIntToString( gid ) ) + ", ";
        sql += string( unsignedIntToString( uid ) ) + ", ";
        sql += string( admin ? "1" : "0" ) + ") ";
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLINTEGER count = 0;
            if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                ret = RES_OK;
            }else{
                string s( "SQLRowCount in insertMember " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            string s( "SQLExecDirect in insertMember " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += string( ", sql=" ) + string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in insertMember" );
        ret = RES_DB_QUERY_ERROR;
    }
    return ret;
}

/**
 * 
 * ?違???若????絮????若?九??.
 * ?????違???若??????絮????????????若?吟?????若??D????緇?????
 * 
 * @param sid ?祉???激?с??D
 * @param gid ?????違???若??????絮????若?吟?????????????????違???若????ID?ф??絎?
 * @param cri 腟???????我??絎?鐚??純?若???＞散??絎?
 * @param uids ??絮????若?吟??ID???????????????????ゃ?潟??/span>
 * @param uidsLen uids???????膣???/span>
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_GROUP
 * @return RES_DB_QUERY_ERROR
 * @return RES_ERROR 
 * 
 */
result_t getMembers( sessionid_t sid, groupid_t gid, criteria_t* cri, userid_t** uids, int* uidsLen )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !gidExists( gid ) ) return RES_NO_SUCH_GROUP; //gid??????????с????/span>
    
    result_t ret = RES_ERROR;
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    userid_t* dst = 0;
    
    //how many members ?
    sql = "SELECT COUNT(*) FROM " + dbprefix + "_xnpaccount_groups_users_link ";
    sql += " WHERE gid=" + string( unsignedIntToString( gid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLUINTEGER count = 0;
            SQLINTEGER len;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &count, 0, &len );
            if( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                dst = new userid_t[ count ];
                *uids = dst;
                *uidsLen = count;
                if( count > 0 ){
                    //retrive member's IDs
                    SQLHANDLE hstmt2 = NULL;    
                   if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt2 ) ) == SQL_SUCCESS ) {
                        sql = "SELECT uid, gid, is_admin FROM " + dbprefix + "_xnpaccount_groups_users_link ";
                        sql += " WHERE gid=" + string( unsignedIntToString( gid ) );
                        sql += " " + string( criteria2str( cri ) );
                        if( ( sqlcode = SQLExecDirect( hstmt2, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
                            SQLUINTEGER uid = 0;
                            SQLINTEGER len;
                            SQLBindCol( hstmt2, 1, SQL_C_ULONG, &uid, 0, &len );
                            for( int i = 0; ( sqlcode = SQLFetch( hstmt2 ) ) == SQL_SUCCESS && i < count ; i++ ){
                                dst[ i ] = uid;
                            }
                            ret = RES_OK;
                        }else{
                            setLastErrorString( "SQLExecDirect in getMembers" );
                            ret = RES_DB_QUERY_ERROR;
                        }
                        SQLFreeHandle( SQL_HANDLE_STMT, hstmt2 );
                    }else{
                        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in getMembers" );
                        ret = RES_DB_QUERY_ERROR;
                    }
                }else{
                    ret = RES_OK;
                }
            }else{
                string s( "SQLFetch in getMembers sql=" );
                s += string( sql );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            setLastErrorString( "SQLExecDirect in getMembers" );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in getMembers" );
        ret = RES_DB_QUERY_ERROR;
    }
    return ret;
}

/**
 * 
 * ?違???若????????
 * ???若?帥???若?鴻?????違???若???????ゃ???障??.
 * 
 * @param sid ?祉???激?с??D
 * @param gid ?????違???若??????絮????若?吟?????????????????違???若????ID?ф??絎?
 * @return RES_OK
 * @return RES_DB_QUERY_ERROR
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_NOT_INITIALIZED
 * 
 */
result_t deleteGroup( sessionid_t sid, groupid_t gid )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    result_t ret = RES_ERROR;
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    
    sql = "DELETE FROM " + dbprefix + "_xnpaccount_groups ";
    sql += "WHERE gid = " + string( unsignedIntToString( gid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLINTEGER count = 0;
            if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                ret = RES_OK;
            }else{
                string s( "SQLRowCount in deleteGroup" );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret = RES_NO_SUCH_USER;
            }
        }else{
            string s( "SQLExecDirect in deleteGroup" );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += ", sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in deleteGroup" );
        ret = RES_ERROR;
    }
    return ret;
}

/**
 * 
 * ?違???若???脂?? 
 * ?違???若???????宴?????若?帥???若?鴻????蚊????鐚?/span>
 * ?脂?蚊?????違???若?????綽??????違???若??ID??gid???主?????鐚?/span>
 * 
 * @param sid ?祉???激?с??D
 * @param group ?脂?蚊???????違???若????????/span>
 * @param gid ?脂?蚊?????違???若?????綽??????違???若??ID
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t insertGroup( sessionid_t sid, const group_t* group, groupid_t* gid )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    result_t ret = RES_ERROR;
    string sql;
    SQLCHAR gname[XNP_GROUP_GNAME_LEN+1], gdesc[XNP_GROUP_GDESC_LEN+1];
    SQLINTEGER cbGname = SQL_NTS, cbGdesc = SQL_NTS;
    SQLRETURN sqlcode;
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        sql = "INSERT INTO " + dbprefix + "_xnpaccount_groups ( gname, gdesc ) VALUES ( ?, ? )";
        sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
        if( sqlcode == SQL_SUCCESS || sqlcode == SQL_SUCCESS_WITH_INFO ){
            SQLBindParameter(hstmt, 1, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_GROUP_GNAME_LEN, 0, gname, 0, &cbGname );
            SQLBindParameter(hstmt, 2, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_GROUP_GDESC_LEN, 0, gdesc, 0, &cbGdesc );
            strncpy2( (char*)gname, group -> getGname( ), XNP_GROUP_GNAME_LEN );
            strncpy2( (char*)gdesc, group -> getDesc( ), XNP_GROUP_GDESC_LEN );
            if( ( sqlcode = SQLExecute( hstmt ) ) == SQL_SUCCESS ){
                SQLINTEGER count = 0;
                if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                    //?違???若??ID????緇?????
                    SQLHANDLE hstmt2 = NULL;
                    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt2 ) ) == SQL_SUCCESS ) {
                        sql = "SELECT LAST_INSERT_ID()"; // MySQL
                        // sql = "SELECT LAST_INSERT_ROWID()"; // SQLite
                        if( ( sqlcode = SQLExecDirect( hstmt2, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
                            SQLUINTEGER last_insert_id;
                            SQLINTEGER len;
                            SQLBindCol( hstmt2, 1, SQL_C_ULONG, &last_insert_id, 0, &len );
                            if( ( sqlcode = SQLFetch( hstmt2 ) ) == SQL_SUCCESS ){
                                *gid = last_insert_id;
                                ret = RES_OK;
                            }else{
                                ret = RES_DB_QUERY_ERROR;
                                string s( "SQLFetch in insertGroup " );
                                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                                setLastErrorString( s.c_str( ) );
                            }
                        }else{
                            string s( "SQLExecDirect in insertGroup " );
                            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                            setLastErrorString( s.c_str( ) );
                            ret = RES_DB_QUERY_ERROR;
                        }
                        SQLFreeHandle( SQL_HANDLE_STMT, hstmt2 );
                    }
                }else{
                    string s( "SQLRowCount in insertGroup sql=" );
                    s += string( sql );
                    setLastErrorString( s.c_str( ) );
                    ret = RES_DB_QUERY_ERROR;
                }
            }else{
                string s( "SQLExecute in insertGroup " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            string s( "SQLPrepare in insertGroup " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            setLastErrorString( s.c_str( ) );
            ret = RES_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in insertGroup" );
        ret = RES_ERROR;
    }
    
    // 
    if ( ret == RES_OK ){
        //group index??篏???
        
        //group index????ort_num????
        string sql = "SELECT MAX(sort_number) FROM " + 
          dbprefix + "_xnpaccount_index WHERE parent_index_id=" + unsignedIntToString(item::IID_ROOT) + 
          " AND (open_level=" + unsignedIntToString(index::OL_GROUP_ONLY) +
            " OR open_level=" + unsignedIntToString(index::OL_PUBLIC) + ")";
        unsigned int sortNumber;
        ret = queryGetUnsignedInt( "insertGroup", sql, &sortNumber );
        sortNumber++;
        if ( ret == RES_OK ){
            // group index篏???
            index_t index;
            userid_t uid;
            ret = sessionID2UID( sid, &uid );
            if ( ret == RES_OK ){
                index.setItemTypeID(item::ITID_INDEX);
                index.setContributorUID(uid);
                index.setParentIndexID(item::IID_ROOT);
                index.setOwnerGID(*gid);
                index.setOpenLevel(index::OL_GROUP_ONLY);
                index.setSortNumber(sortNumber);
                index.setTitle(group->getGname());
                indexid_t groupXID;
                ret = insertIndexInternal( sid, &index, &groupXID );
                if ( ret == RES_OK ){
                    // xnpaccuont_groups??roup_index_id???吾??????
                    sql = "UPDATE " + dbprefix + "_xnpaccount_groups SET group_index_id=" 
                      + unsignedIntToString(groupXID) + " WHERE gid=" + unsignedIntToString(*gid);
                    ret = querySimple( "insertGroup", sql );
                }
            }
        }
    }
    
    return ret;
}

/**
 * 
 * ?違???若?????宴??紊??眼????
 * 
 * @param sid ?祉???激?с??D
 * @param group ?違?????違???若??????/span>
 * @return RES_OK
 * @return RES_ERROR
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_GROUP
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t updateGroup( sessionid_t sid, const group_t* group )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( group == NULL ) return RES_ERROR;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !gidExists( group -> getGID( ) ) ) return RES_NO_SUCH_GROUP;
    
    result_t ret = RES_ERROR;
    string sql;
    SQLCHAR gname[XNP_GROUP_GNAME_LEN+1], gdesc[XNP_GROUP_GDESC_LEN+1];
    SQLINTEGER cbGname = SQL_NTS, cbGdesc = SQL_NTS;
    SQLRETURN sqlcode;
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        sql = "UPDATE " + dbprefix + "_xnpaccount_groups SET gname=?, gdesc=? WHERE gid=" + string( unsignedIntToString( group -> getGID( ) ) );
        sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
        if( sqlcode == SQL_SUCCESS || sqlcode == SQL_SUCCESS_WITH_INFO ){
            SQLBindParameter(hstmt, 1, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_GROUP_GNAME_LEN, 0, gname, 0, &cbGname );
            SQLBindParameter(hstmt, 2, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_GROUP_GDESC_LEN, 0, gdesc, 0, &cbGdesc );
            strncpy2( (char*)gname, group -> getGname( ), XNP_GROUP_GNAME_LEN );
            strncpy2( (char*)gdesc, group -> getDesc( ), XNP_GROUP_GDESC_LEN );
            if( ( sqlcode = SQLExecute( hstmt ) ) == SQL_SUCCESS ){
                SQLINTEGER count = 0;
                if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                    ret = RES_OK;
                }else{
                    string s( "SQLRowCount in updateGroup sql=" );
                    s += string( sql );
                    setLastErrorString( s.c_str( ) );
                    ret = RES_DB_QUERY_ERROR;
                }
            }else{
                string s( "SQLExecute in updateGroup " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            setLastErrorString( "SQLPrepare in updateGroup sql=" );
            ret = RES_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in updateGroup" );
        ret = RES_ERROR;
    }
    return RES_OK;
}

/**
 * 
 * ?違???若?????怨??
 * 
 * @param sid ?祉???激?с??D
 * @param gid ??緇????????違???若????ID
 * @param group ??緇??????違???若?????宴???≪?????鴻???吾??莨若?????ゃ?潟??/span>
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_GROUP
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t getGroup( sessionid_t sid, groupid_t gid, const group_t** group )
{
    int len;
    static criteria c;
    result_t res = getGroups( sid, &gid, 1, &c, group, &len );
    if( len == 0 ) return RES_NO_SUCH_GROUP;
    return res;
}

/**
 * 
 * 茲??違???違???若?????宴??筝?綺?????????.
 * 
 * @param sid ?祉???激?с??D
 * @param gids ??緇????????違???若????ID??????
 * @param gidsLen gids???????膣???/span>
 * @param cri 腟???????膀??駕??純?若???＞散????絎?
 * @param groups ??緇?腟??????違???若?????宴?????????≪?????鴻???吾??莨若?????ゃ?潟??/span>
 * @param groupsLen ??緇?腟????????????膣???/span>
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t getGroups( sessionid_t sid, groupid_t* gids, int gidsLen, criteria_t* cri, const group_t** groups, int* groupsLen )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;

#ifdef USE_SYSLOG
    openlog( "commonal", LOG_ODELAY, LOG_USER );
#endif
    
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    result_t ret = RES_ERROR;
    string sql;
    group_t* dst = new group_t[ gidsLen ];
    
    sql += "SELECT gid, gname, gdesc, group_index_id ";
    sql += "FROM " + dbprefix + "_xnpaccount_groups ";
    if( gidsLen > 0 ){
        sql += "WHERE gid=" + string( unsignedIntToString( gids[ 0 ] ) );
        for( int i = 1; i < gidsLen; i++ ){
            sql += " OR gid=" + string( unsignedIntToString( gids[ i ] ) );
        }
    }
    sql += criteria2str( cri );
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLINTEGER len;
            groupid_t gid = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &gid, 0, &len );
            *groupsLen=0;
            for( int i = 0; ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS && i < gidsLen ; i++ ){
                dst[ i ].setGID( gid );
                dst[ i ].setGname( getResultCol( hstmt, 2 ).c_str() );
                dst[ i ].setDesc( getResultCol( hstmt, 3 ).c_str() );
                dst[ i ].setGroupIndexID( atoi(getResultCol( hstmt, 4 ).c_str()) );
                ( *groupsLen )++;
            }
            *groups = dst;
#ifdef USE_SYSLOG
            syslog( LOG_DEBUG, "getGroups succeed" );
#endif
            ret = RES_OK;
        }else{
            string s( "SQLExecDirect in getGroups" );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += string( ", sql=" ) + string( sql );
            setLastErrorString( s.c_str( ) );
#ifdef USE_SYSLOG
            syslog( LOG_DEBUG, "getGroups %s", getLastErrorString( ) );
#endif
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in getGroups" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
#ifdef USE_SYSLOG
        syslog( LOG_DEBUG, "getGroups %s", getLastErrorString( ) );
#endif
        ret = RES_DB_QUERY_ERROR;
    }
#ifdef USE_SYSLOG
    closelog( );
#endif
    return ret;
}

/**
 * 
 * ?≪?????若?炊┤???????＜??菴???
 * 
 * @param sid ?祉???激?с??D
 * @param uid ???????????????若?吟??ID
 * @return true 罔???????
 * @return false 罔???????
 * 
 */
bool isModerator( sessionid_t sid, userid_t uid )
{
    if( hdbc == NULL ) return false;
    if( !isValidSessionID( sid ) ) return false;
    if( !uidExists( uid ) ) return false;
    
    bool ret = false;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    SQLINTEGER count = 0;
    string sql;
    groupid_t moderator_gid;
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        sql = "SELECT value FROM " + dbprefix + "_xnpaccount_config";
        sql += " WHERE name='moderator_gid'";
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLINTEGER len = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &moderator_gid, 0, &len );
            if( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                sql = "SELECT * from " + dbprefix + "_groups_users_link ";
                sql += "WHERE groupid=" + unsignedIntToString( moderator_gid );
                sql += " AND uid=" + string( unsignedIntToString( uid ) );
                if( countResultRows( sql.c_str(), &count ) == RES_OK ){
                    if( count > 0 ){
                        ret = true;
                    }
                }
            }else{
                setLastErrorString( "SQLFetch in isModerator " );
            }
        }else{
            string s( "SQLExecDirect in isModerator " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += ", sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle in isModerator " );
    }
    return ret;
}

/**
 * 
 * ???若??D??緇?
 * 
 * @param uname ID????緇??????????若?吟?弱??
 * @param uid ID??篁ｅ?ャ??????紊??違?????ゃ?潟??/span>
 * @return RES_ERROR
 * @return RES_OK 
 * @refer result_t
 * 
 */
result_t getUid( const char* uname, userid_t* uid )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( uname == NULL ) return RES_ERROR;
    
    result_t ret = RES_ERROR;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    string sql;
    string uname2 = addSlashes( uname );
    
    sql = "SELECT uid FROM " + dbprefix + "_users WHERE uname='" + uname2 + "';";
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            userid_t _uid = 0;
            SQLINTEGER len;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &_uid, 0, &len );
            sqlcode = SQLFetch( hstmt );
            if( sqlcode == SQL_SUCCESS ){
                *uid = _uid;
                ret = RES_OK;
            }else {
                string s( "SQLFetch in getUid sql=" );
                s += string( sql );
                setLastErrorString( s.c_str( ) );
                ret = RES_NO_SUCH_USER;
            }
        }else{
            setLastErrorString( "SQLExecDirect in getUid" );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in getUid" );
        ret = RES_DB_QUERY_ERROR;
    }
    
    return ret;
}

/**
 * 
 * ?祉???激?с?潟??篏?????xoops_xnpaccount_session???吾??莨若???? sessionid_t??session???????
 * 
 * @param uid xoops_users??id
 * @param session sessionid_t???????????????????ゃ?潟?帥??
 * @return RES_OK ????
 * @return RES_DB_QUERY_ERROR DB????????筝?????????/span>
 */
static result_t addSession( userid_t uid, sessionid_t* session )
{
    char *functionName = "addSession";
    string sql = "INSERT INTO " + dbprefix + "_xnpaccount_session (uid) values (" + 
      unsignedIntToString(uid) + ")";
    result_t ret = querySimple( functionName, sql );
    if ( ret == RES_OK ){
        sql = "SELECT LAST_INSERT_ID()";
        ret = queryGetUnsignedInt( functionName, sql, (unsigned int*)session );
    }
    return ret;
}


/**
 * 
 * ???違?ゃ?活?荐若???祉???激?с?割???
 * 
 * @param uname ???違?ゃ?喝??
 * @param passwd ???鴻???若??
 * @param session sessionid_t???????????????????ゃ?潟?帥??
 * @return RES_OK ???違?ゃ?恰??????session??essionid_t???吾??莨若??????<br>
 * @return RES_LOGIN_FAILURE uname?障????asswd???医幻<br>
 * @return RES_DB_QUERY_ERROR DB????????筝?????????/span>
 * 
 */
result_t loginUser(const char* uname, const char* passwd, sessionid_t* session )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    
    result_t ret;
    string sql;
    SQLRETURN sqlcode;
    
    // uname, passwd -> uid
    string escUname = addSlashes( uname );
    string escPasswd = addSlashes( passwd );
    sql = "SELECT uid FROM " + dbprefix + "_users WHERE uname='" + escUname + "' and pass=md5('" + escPasswd + "')";
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            userid_t uid = 0;
            SQLINTEGER len;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &uid, 0, &len );
            sqlcode = SQLFetch( hstmt );
            if( sqlcode == SQL_SUCCESS ){
                ret = addSession( uid, session );
            }else {
                string s( "SQLFetch in loginUser" );
                setLastErrorString( s.c_str( ) );
                ret = RES_LOGIN_FAILURE;//illegal loginname or password
            }
        }else{
            setLastErrorString( "SQLExecDirect in loginUser" );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in loginUser" );
        ret = RES_DB_QUERY_ERROR;
    }
    
    return ret;
}

/**
 * 
 * ???違?≪???????祉???激?с?括?篋?
 * 
 * @param sid session id
 * @return ????
 * 
 */
void logoutUser( sessionid_t sid )
{
    if( hdbc == NULL ) return; // RES_DB_NOT_INITIALIZED;
    
    result_t ret;
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    
    sql = "DELETE FROM " + dbprefix + "_xnpaccount_session WHERE sid=" + intToString((int)sid);
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            ;
        }
        else {
            setLastErrorString( "SQLExecDirect in logoutUser" );
        }
    }
    else {
        setLastErrorString( "SQLAllocHandle(SQL_HANDLE_STMT,...) in logoutUser" );
    }
}

/**
 * 
 * ?祉???激?с?潟?????.<br>
 * XOOPS??ession???若????????蚊??????sess_id?????ess_id??膈??????
 * uid??Platform???若?吟??????ctivate????????????essionid_t??篏?????????
 * ???若?帥???若?鴻???祉???激?с?潟????違?????宴??荐??蚊????
 * 
 * @param sessionid xoops??ession_id
 * @param uid  xoops_users??id
 * @param session sessionid_t???????????????????ゃ?潟?帥??
 * @return RES_OK
 * @return RES_ERROR
 * @return RES_DB_QUERY_ERROR
 * @return RES_NO_SUCH_USER
 *
 */
result_t createSession( const char* sess_id, userid_t uid, sessionid_t* session )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    
    result_t ret;
    string sql;
    SQLHANDLE hstmt = NULL;
    SQLRETURN sqlcode;
    
    sql = "SELECT count(*) from " + dbprefix + "_xnpaccount_users where uid=" + unsignedIntToString( uid ) + " and activate=1";
    unsigned int count;
    ret = queryGetUnsignedInt( "createSession", sql, &count );
    if ( ret != RES_OK )
        return ret;
    if ( count = 0 )
        return RES_NO_SUCH_USER; // bad uid or activate=0
    
    string escSess_id = addSlashes(sess_id);
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        sql = "SELECT sess_id from " + dbprefix + "_session where sess_id=?";