xoonips/AL/commonal.cc

/*
 * 
 * $Revision: 1.82 $
 * $Log: commonal.cc,v $
 * Revision 1.82  2005/03/11 07:11:30  tani
 * itemid_t配列の長さ(*iidsLen)の初期化処理を追加.
 *
 * Revision 1.81  2005/03/11 00:34:57  tani
 * アイテムのアクセス権チェックにcertify_state追加.
 *
 * Revision 1.80  2005/03/09 07:27:37  aga4096
 * ・activate=0ならloginUserに失敗するよう修正.
 *
 * Revision 1.79  2005/03/07 01:20:09  aga4096
 * ・getItemCountGroupByIndexで未承認アイテム・インデックスを数えないよう修正.
 *
 * Revision 1.78  2005/03/05 02:28:05  aga4096
 * ・個人領域のインデックスが Private と表示されるよう修正.
 *
 * Revision 1.77  2005/03/05 01:48:35  aga4096
 * ・getItemCountGroupByIndexを作成.
 *
 * Revision 1.76  2005/03/04 06:13:28  aga4096
 * ・updateIndexで、同じ名前の兄弟があるか名前が空であるならエラーにした.
 *
 * Revision 1.75  2005/03/03 10:13:00  aga4096
 * ・isValidSessionでtimestampを更新するよう修正.
 * ・sessionはisValidSessionしない限り1時間でタイムアウトするよう修正.
 * ・loginUser, createSessionでタイムアウトしたsessionを削除するよう修正.
 *
 * Revision 1.74  2005/02/26 05:11:31  tani
 * getGroupItemID追加.
 *
 * Revision 1.73  2005/02/25 07:41:35  tani
 * getGroupItemID追加.
 * item, indexのlimitフィールドを登録，更新処理に追加.
 *
 * Revision 1.72  2005/02/25 01:03:42  tani
 * dbtype==DBTYPE_SQLITEの時の処理を分岐.
 *
 * Revision 1.71  2005/02/24 11:32:55  aga4096
 * ・updateGroupでグループインデックスの名前を変更するよう修正.
 *
 * Revision 1.70  2005/02/23 06:39:28  tani
 * isGuestEnabled: 設定を読み込むテーブルを変更.
 *
 * Revision 1.69  2005/02/22 02:39:30  tani
 * public_item_target_user_all関数を追加.
 * SQL中のpublic_item_target_user_allの比較式をpublic_item_target_user_all関数に置換.
 * sessionテーブルのLEFT JOINの条件にsidのチェックを追加.
 * DB問合せ処理の高速化.
 *
 * Revision 1.68  2005/02/21 05:46:18  tani
 * getItemCountを追加.
 * dumpItemID, getItemsの問合せを高速化.
 *
 * Revision 1.67  2005/02/19 02:06:11  tani
 * 承認状態の権限チェックに作成者を追加.
 *
 * Revision 1.66  2005/02/16 10:03:13  youi
 * publication_year/month/mdayに対応.
 *
 * Revision 1.65  2005/02/16 07:37:17  youi
 * insertItem, updateItem, getItems: publication_dateに対応.
 *
 * Revision 1.64  2005/02/15 02:35:47  youi
 * SQLINTEGERからSQLLENへ型変更.
 *
 * Revision 1.63  2005/02/10 02:33:16  aga
 * ・zipCreateをコメントアウトしていたのを戻した.
 *
 * Revision 1.62  2005/02/09 11:11:52  youi
 * deleteItemにアイテムに関係するエントリの削除処理を追加.
 *
 * Revision 1.61  2005/02/09 07:23:50  aga
 * ・URL to My Personal Archive をDB・ALから消した.
 *
 * Revision 1.60  2005/02/09 02:14:15  aga
 * ・initializeDB()にdbtype引数を追加(SQLite用).
 *
 * Revision 1.59  2005/02/08 07:15:02  youi
 * pubmedパース処理:
 *
 * Revision 1.58  2005/02/08 06:40:51  youi
 * pubmedComplete:ジャーナルの完全なタイトルを取得してpubmed_tにセット.
 *
 * Revision 1.57  2005/02/03 12:04:58  youi
 * getOwnPublicItemIDを定義.
 * binder_item_linkのテーブル名を修正.
 *
 * Revision 1.56  2005/01/29 09:49:22  youi
 * syslog_printf: デバッグメッセージ出力関数を定義した.
 * getCertifyPermission: チェック用のsqlを定義した.
 * SQLINTEGER->SQLLENへ型を変更した.
 * getItemPermission: モデレータであるか？の判断条件を修正.
 *
 * Revision 1.55  2005/01/28 07:01:38  youi
 * getItemIDByIndexID: 対象となるアイテムの条件見直し.
 * SQLAllocHandle失敗時のメッセージを追加.
 *
 * Revision 1.54  2005/01/28 00:36:58  aga
 * ・freeStringで落ちることがあるのを修正.
 *
 * Revision 1.53  2005/01/27 08:30:35  youi
 * getIndexIDByItemIDを定義した.
 *
 * Revision 1.52  2005/01/25 06:46:50  aga
 * ・Bindersを含むindexはdeleteIndex不可.
 * ・getItemsがエラーを出すことがあるのを修正.
 *
 * Revision 1.51  2005/01/24 10:50:29  youi
 * freeItemType,getItemTypes関数を追加した.
 *
 * Revision 1.50  2005/01/24 01:54:38  youi
 * 引数の型修飾を変更.
 *  dumpItemID, getItemIDByBinderID, getItemIDByIndexID
 * 関数追加
 *  getPrivateItemID, getUncertifiedLink
 *
 * Revision 1.49  2005/01/22 09:30:58  youi
 * setLastErrorStringの宣言を追加した.
 *
 * Revision 1.48  2005/01/22 04:18:22  aga
 * ・loginUser, insertAccount内ではmd5()を行わないよう修正.
 *
 * Revision 1.47  2005/01/22 02:41:14  aga
 * ・amazon補完を作成.
 *
 * Revision 1.46  2005/01/21 01:36:11  youi
 * pubmed補完機能を追加した.
 *
 * Revision 1.45  2005/01/19 10:07:53  aga
 * ・ゲストユーザ向けの修正.
 *
 * Revision 1.44  2005/01/19 06:01:59  youi
 * 関数追加
 *  getConfigValue
 *  setConfigValue
 *  getChangeLogs
 *  insertChangeLog
 *  getItemIDByBinderID
 *  registerBinderItem
 *  unregisterBinderItem
 *  getIndexPermission
 *  freeString
 *  freeChangeLog
 * 引数にcriteria_tを追加
 *  getItemIDByIndexID
 * 引数の順序を変更
 *  getCertifyState
 *  setCertifyState
 *  getCertifyPermission
 * sessionID2UID,querySimple,queryGetUnsignedIntの利用
 * insertItemの内部でPrivateIndexへ登録を行なう
 * getItems: getItemPermissionを使った読み込み権限チェック.
 *
 * Revision 1.43  2005/01/19 01:42:15  aga
 * ・x_xnpaccount_indexのgid,uidが0にならないよう修正.
 *
 * Revision 1.42  2005/01/19 00:51:29  aga
 * ・insertIndexでx_xnpaccount_index.index_idがおかしいのを修正.
 *
 * Revision 1.41  2005/01/19 00:06:51  aga
 * ・updateIndexで、同じ名前の兄弟があるか名前が空であるならエラーにした.
 * ・createSessionで、uidがPlatformユーザでないかactivateされていないならエラーにした.
 *
 * Revision 1.40  2005/01/17 00:15:05  aga
 * ・deleteIndex, updateIndexに失敗することがあるのを修正.
 *
 * Revision 1.39  2005/01/15 05:38:10  youi
 * insertAccount: 文字列バッファのサイズ調整など.
 * updateAccount: 文字列バッファのサイズ調整など.
 * アイテム管理関数を定義した.
 *     insertItem, getItem, getItems, dumpItemID, updateItem, deleteItemなど.
 * freeGID, freeUID: 引数の型を修正.
 *
 * Revision 1.38  2005/01/15 00:39:16  aga
 * ・x_xnpaccount_item_basicの構造を変更.
 *
 * Revision 1.37  2005/01/14 10:36:59  aga
 * ・index関係の処理を追加.
 * ・insertAccountでprivate indexを作成するよう修正.
 * ・insertGroupでgroup index を作成するよう修正.
 *
 * Revision 1.36  2005/01/13 04:19:22  aga
 * ・VPをXNPに変換.
 *
 * Revision 1.35  2005/01/06 07:20:17  youi
 * WIN32定義時のインクルードの追加.
 * MySQL APIに関するヘッダファイルを削除.
 * deleteAccount: 所属するPlatformグループからの削除を内蔵した.
 * insertAccount: ユーザ登録と同時にデフォルトPlatformグループへ登録する.
 * deleteMember: デフォルトPlatformグループからの削除を禁止する.
 * deleteMemberNoLimitの定義.
 *
 * Revision 1.34  2004/12/28 04:38:14  aga
 * ・logoutUser()の修正.
 *
 * Revision 1.33  2004/12/27 05:56:23  youi
 * odbcDiagString: STMT以外のハンドルも処理するように変更した.
 * syslogメッセージの処理を追加した.
 *
 * Revision 1.32  2004/12/25 09:46:47  youi
 * MySQL+MyODBCで動作するように修正した.
 *
 * Revision 1.31  2004/12/21 11:42:59  youi
 * コメントの引数，戻り値の説明などを追加.
 *
 * Revision 1.30  2004/12/18 10:24:54  youi
 * IMPORT_MYSQLDLLを定義したとき，MYSQLのDLLを動的リンクするプロトタイプ宣言が
 * 有効になるように修正した.
 *
 * Revision 1.29  2004/12/18 01:12:29  youi
 * freeResultの関数名をfree<データ型>に変更した.
 *
 * Revision 1.28  2004/12/14 12:02:08  youi
 * __WIN__を定義したときはwindowsのdll作成に必要な処理を行なう.
 * USE_SYSLOGを定義したときはsyslogdへメッセージを出力する.
 * getAccounts: uidsLenが0のときの処理を追加した.
 *
 * Revision 1.27  2004/12/06 11:34:47  aga
 * ・uninitializeDB()を追加.
 *
 * Revision 1.26  2004/12/06 10:17:36  youi
 * mysql_use_resultの取得結果を残さず取り出すため，
 * while( row = mysql_fetch_row(result) );を挿入．
 *
 * Revision 1.25  2004/12/06 07:24:33  youi
 * insertAccount, insertGroup:
 *     新規追加した情報に対応するユーザID，グループIDを第三引数に書き込む.
 *
 * Revision 1.24  2004/12/06 01:45:50  aga
 * ・コメントつけ.
 * ・開放忘れ修正.
 *
 * Revision 1.23  2004/12/04 09:21:10  aga
 * ・xnp_config → xnpaccount_config.
 *
 * Revision 1.22  2004/12/03 07:17:21  youi
 * isModeratorでアクセスするデータベーステーブル名を修正.
 *
 * Revision 1.21  2004/12/01 10:28:58  youi
 * DBカラム名の変更に伴う修正
 *     institute -> division
 *     organizaion -> company_name
 *
 * Revis1.20  2004/12/01 04:37:04  youi
 * freeResult: unsigned int* を int* へ修正.
 * コメント部に関数の説明を追記.
 *
 * Revision 1.19  2004/11/30 06:40:11  youi
 * 関数を追加(gidExists, uidExists)
 * getGroupCountを定義.
 * getGroupsByUidを定義.
 * isGroupAdminを修正.
 * dumpGroupAdminsを定義.
 * deleteMemberを定義.
 * insertMemberを定義.
 * getMembersを定義.
 * isModeratorを定義.
 *
 * Revision 1.18  2004/11/30 05:46:32  aga
 * ・sessionからremoteHostを削除.
 *
 * Revision 1.17  2004/11/27 09:35:49  youi
 * isActivatedを定義.
 * activateを定義.
 * dumpUidを定義.
 *
 * Revision 1.16  2004/11/27 06:29:29  youi
 * getAccountCountを定義.
 * dumpGidsを定義.
 * insertGroup, deleteGroup, updateGroupを定義.
 * getGroup, getGroupsを定義.
 * データベース初期前の呼出に対し，RES_DB_NOT_INITIALIZEDを返す処理を各関数に追加
 * (未対応の関数が残っている)
 *
 * Revision 1.15  2004/11/27 02:22:22  aga
 * ・initializeDB前にaddSlashes()を呼ぶと落ちるのを修正.
 *
 * Revision 1.14  2004/11/27 01:07:31  youi
 * criteria2str: LIMITとORDER BYの順番を入れ替えた.
 *
 * Revision 1.13  2004/11/27 00:35:39  youi
 * getAccountsを定義.
 * getAccountを修正，内部でgetAccountsを呼び出す.
 * criteria2strを定義.
 *
 * Revision 1.12  2004/11/26 09:45:28  youi
 * getAccountを定義.
 *
 * Revision 1.11  2004/11/26 08:16:26  aga
 * ・getSession, loginUser, createSession, freeResult(const session_t*) 修正.
 *
 * Revision 1.10  2004/11/26 07:57:42  youi
 * updateAccount, deleteAccountを定義.
 * mysql_query失敗時はstderrへエラーコードとエラーメッセージを出力.
 *
 * Revision 1.9  2004/11/26 07:38:02  aga
 * ・FAILUE -> FAILURE.
 *
 * Revision 1.8  2004/11/26 06:36:55  aga
 * ・createSession, getSession を作成.
 *
 * Revision 1.7  2004/11/26 04:51:47  youi
 * dbprefixを定義した.
 * insertAccountを定義した.
 * isValidSessionIDを定義した.
 *
 * Revision 1.6  2004/11/26 04:35:55  aga
 * ・loginUser(), logoutUser()を作成.
 *
 * Revision 1.5  2004/11/26 01:08:25  aga
 * ・addSlashes()作成.
 *
 * Revision 1.4  2004/11/25 12:14:29  youi
 * getUidの処理を定義した.
 *
 * Revision 1.3  2004/11/25 11:13:59  youi
 * getLastErrorString/setLastErrorStringを定義.
 *
 * Revision 1.2  2004/11/25 08:55:19  youi
 * 引数の型を修正.
 * freeResultを追加.
 *
 * Revision 1.1  2004/11/25 05:14:58  youi
 * initial version
 *
 * 
 */
#ifdef WIN32
#include <windows.h>
#endif

#ifdef USE_SYSLOG
#include <syslog.h>
#endif

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <string>
#include <assert.h>
#include <time.h>
#include <sql.h>
#include <sqlext.h>
#include <libxml/xmlreader.h>

using namespace std;

#include "common.h"
#include "account.h"
#include "group.h"
#include "session.h"
#include "item.h"
#include "itemtype.h"
#include "criteria.h"
#include "commonal.h"
#include "item.h"
#include "index.h"
#include "changelog.h"
#include "pubmed.h"
#include "amazonbook.h"

static string dbprefix; //!< XOOPSデータベーステーブルのPREFIX
static dbtype_t dbtype; //!< MySQL/SQLite

static SQLHANDLE henv = NULL;
static SQLHANDLE hdbc = NULL;
static SQLHANDLE hstmt = NULL;

static bool processEsummary(xmlTextReaderPtr reader, pubmed_t* p);
static bool processEsearch(xmlTextReaderPtr reader, pubmed_t* p, int* DocID );
static void processEfetch(xmlTextReaderPtr reader, pubmed_t* p);
static int streamPubmedFile(const char *filename, pubmed_t* p);
static result_t insertIndexInternal( sessionid_t sid, index_t *index, indexid_t *xid );
static string odbcDiagString( SQLSMALLINT HandleType, SQLHANDLE hstmt, SQLRETURN sqlcode );
static result_t deleteMemberNoLimit( sessionid_t sid, groupid_t gid, userid_t uid );
static result_t getXoopsModuleConfigValue( const char *module, const char *key, char **value );
static void setLastErrorString( const char* str );
static result_t checkTitleConflict( sessionid_t sid, indexid_t parentIndexID, const char *title, bool *conflict );

void syslog_printf( char* format, ... )
{
#ifdef USE_SYSLOG
    va_list ap;
    va_start(ap, format);
    openlog( "commonal", LOG_ODELAY, LOG_USER );
    vsyslog( LOG_DEBUG, format, ap );
    #endif
}

/**
 * 
 * public_item_target_userの設定値が'all'ならtrueをかえす
 * 設定値の取得に失敗した場合，'all'以外の場合はfalseをかえす
 * 
 */
static bool public_item_target_user_all( )
{
    char* value = 0;
    bool public_item_target_user_all = false;
    if( getConfigValue( XNP_CONFIG_PUBLIC_ITEM_TARGET_USER_KEY, &value ) == RES_OK ){
        public_item_target_user_all = ( strcmp( value, XNP_CONFIG_PUBLIC_ITEM_TARGET_USER_ALL ) == 0 );
        freeString( value );
    }
    return public_item_target_user_all;
}

static result_t countResultRows( const char* sql, SQLLEN* count )
{
    result_t ret = RES_ERROR;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql, strlen( sql ) ) ) == SQL_SUCCESS ){
            *count = 0;
            while( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ) ( *count )++;
            ret = RES_OK;
        }else{
            string s( "SQLExecDirect in countResultRows " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += "sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }
    return ret;
}


/**
 * 
 * インデックス登録，アイテム更新を行なったときの承認状態の初期値を，
 * システム設定にしたがって返します．
 * 
 */
static certify_t getInitialCertifyStateFromConfig( )
{
    char* certify_item_val;
    certify_t ret = index::NOT_CERTIFIED;
    
    if( getConfigValue( XNP_CONFIG_CERTIFY_ITEM_KEY, &certify_item_val ) == RES_OK ){
        if( strcmp( certify_item_val, XNP_CONFIG_CERTIFY_ITEM_AUTO ) == 0 ){
            //certify automatic
            ret = index::CERTIFIED;
        }else if( strcmp( certify_item_val, XNP_CONFIG_CERTIFY_ITEM_ON ) == 0 ){
            //certify by moderator or group admin
            ret = index::CERTIFY_REQUIRED;
        }
        syslog_printf( "\ngetInitialCertifyStateFromConfig certify_item_val=%s", certify_item_val );
        freeString( certify_item_val );
    }
    return ret;
}

/**
 * 
 * セッションに対応付けられたユーザが，PlatformユーザとしてActivateさ
 * れているかを返す
 *
 * @param sid セッションID
 * @return true Activateされている
 * @return false Activateされている，またはエラー
 *
 */
static bool isActivatedBySession( sessionid_t sid )
{
    const session_t* session;
    if( getSession( sid, &session ) == RES_OK ){
        userid_t sess_uid = session ->  getUID( );
        freeSession( session );
        return isActivated( sid, sess_uid );
    }
    return false;
}

/**
 * 
 * セッションに対応付けられたユーザが，モデレータであるか？
 * 
 * 
 * @param sid セッションID
 * @return true モデレータ
 * @return false モデレータでない，またはエラー
 *
 */
static bool isModeratorBySession( sessionid_t sid )
{
    const session_t* session;
    if( getSession( sid, &session ) == RES_OK ){
        userid_t sess_uid = session ->  getUID( );
        freeSession( session );
        return isModerator( sid, sess_uid );
    }
    return false;
}


/** SQLを実行する。結果は捨てる。
  * @param sql sql
  * @return result_t
  */
static result_t querySimple( const char *functionName, string &sql ){
    result_t ret = RES_ERROR;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), strlen( sql.c_str() ) ) ) == SQL_SUCCESS ){
            ret = RES_OK;
        }else{
            string s( "SQLExecDirect in querySimple " );
            s += functionName;
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += "sql=";
            s += sql;
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }
    else {
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in querySimple " );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = RES_ERROR;
    }
    return ret;
}

/** SQLを実行し、1行目の最初の整数値(NULLなら0とみなす)のみ受け取る。
  * @param sql sql
  * @param u   整数値を受け取る変数。
  * @return result_t
  */
static result_t queryGetUnsignedInt( const char *functionName, string &sql, unsigned int *u ){
    result_t ret = RES_ERROR;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;

    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), strlen( sql.c_str() ) ) ) == SQL_SUCCESS ){
            SQLUINTEGER sInt = 0;
            SQLLEN len = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &sInt, 0, &len );
            if( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                if ( len == SQL_NULL_DATA )
                    sInt = 0;
                *u = sInt;
                ret = RES_OK;
            }else{
                string s( "SQLFetch in queryGetUnsignedInt " );
                s += functionName;
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                setLastErrorString( s.c_str( ) );
                ret = RES_ERROR;
            }
        }else{
            string s( "SQLExecDirect in queryGetUnsignedInt " );
            s += functionName;
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += "sql=";
            s += sql;
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }
    else {
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in queryGetUnsignedInt " );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = RES_ERROR;
    }
    return ret;
}

/**
 * 
 * 文字列コピー．
 * 指定文字数をコピーし，バッファの最後をNULL終端する．
 * ( dstのサイズ >= len + 1 )であること
 * 
 */
static char* strncpy2( char* dst, const char* src, int len )
{
    strncpy( dst, src, len );
    dst[ len ] = '\0';
    syslog_printf( "\nstrncpy2 '%s'\n", dst );
    return dst;
}

/**
 * 
 * SQLの実行結果からエラー文字列を生成する
 * 
 * @param hstmt SQL文のハンドル
 * @param sqlcode SQLExecDirect,SQLExecuteの戻り値
 * @return エラー文字列
 */
static string odbcDiagString( SQLSMALLINT HandleType, SQLHANDLE hstmt, SQLRETURN sqlcode )
{
    string s;
    if( sqlcode == SQL_ERROR || sqlcode == SQL_SUCCESS_WITH_INFO ){
        SQLCHAR SQLState[6];
        SQLINTEGER NativeError;
        SQLCHAR MessageText[ 1024 ];
        SQLSMALLINT TextLength;
        SQLGetDiagRec( HandleType, hstmt, 1, SQLState, &NativeError, MessageText, 1024, &TextLength );
        
        s += string( (char*)MessageText );
        s += " SQLSTATE=";
        s += string( (char*)SQLState );
        
    }
    s += " sqlcode=";
    s += intToString( sqlcode );
    return s;
}

/** 
 * 
 * 指定カラムの値を取り出してその文字列を返す
 * 
 */
string getResultCol( SQLHANDLE hstmt, int col )
{
    string s;
    SQLRETURN  sqlcode;
    SQLCHAR    BinaryPtr[5000];
    SQLLEN     BinaryLenOrInd;
    SQLINTEGER NumBytes;
    
    syslog_printf( "getResultCol" );
    while ( ( sqlcode = SQLGetData(hstmt, col, SQL_C_CHAR, BinaryPtr, sizeof(BinaryPtr),
                                   &BinaryLenOrInd)) != SQL_NO_DATA) {
        syslog_printf( "SQLGetData BinaryLenOrInd=%d", BinaryLenOrInd );
        NumBytes = (BinaryLenOrInd > 5000) || (BinaryLenOrInd == SQL_NO_TOTAL) ? 5000 : BinaryLenOrInd;
        if( NumBytes <= 0 ) break;
        else if( NumBytes > 0 ){
            s += string( (char*)BinaryPtr, NumBytes );
        }
    }
    syslog_printf( "getResultCol returns %s", s.c_str() );
    return s;
}


/** 
 * 
 * クォートなどを\記号でエスケープする
 * 
 * @param str addslashesすべき文字列。NULL指定不可。
 * @return 変換後の文字列
 */
string addSlashes( const char *str )
{
        if ( hdbc == NULL ){
                string s;
                return s;
        }else{
        string s( str );
        return s;
    }
    
        int len = strlen(str) * 3;
    char* dst = new char[ len ];
    const char* from = str;
    char* to = dst;
    while( *from != '\0' ){
        switch( *from ){
        case '\'':
        case '\"':
        case ';':
            *to = '\\'; to++;
            break;
        }
        *to = *from; to++;
        from++;
    }
    *to = '\0';
        string s( dst );
    delete[] dst;
        return s;
}

/** Xoops Module の設定を調べる
  * @param module モジュールのdirname
  * @param key    設定のkey
  * @param value  設定を返す変数。
  * @return 
  */
static result_t getXoopsModuleConfigValue( const char *module, const char *key, char **value ){
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    result_t result = RES_ERROR;
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        string sql = "SELECT conf_value "
            " from " + dbprefix + "_config as tc, " + dbprefix  + "_modules as tm "
            " where tm.mid=tc.conf_modid and tm.dirname = ? and tc.conf_name = ? ";
        sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
        SQLLEN cbModule = SQL_NTS, cbKey = SQL_NTS;
        SQLBindParameter(hstmt,  1, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_VARCHAR, strlen(module), 0, (SQLCHAR *)module, 0, &cbModule );
        SQLBindParameter(hstmt,  2, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_VARCHAR, strlen(key),    0, (SQLCHAR *)key,    0, &cbKey );
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), strlen( sql.c_str() ) ) ) == SQL_SUCCESS ){
            if ( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                string s = getResultCol( hstmt, 1 );
                *value = new char[s.length()+1];
                strcpy( *value, s.c_str() );
                result = RES_OK;
            }
            else if ( sqlcode == SQL_NO_DATA ){
                *value = 0;
                result = RES_OK;
            }
            else {
                string s( "SQLFetch in getXoopsModuleConfig " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += "sql=";
                s += sql;
                setLastErrorString( s.c_str( ) );
                result = RES_ERROR;
            }
        }else{
            string s( "SQLExecDirect in getXoopsModuleConfig " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += "sql=";
            s += sql;
            setLastErrorString( s.c_str( ) );
            result = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }
    else {
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in getXoopsModuleConfig " );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        result = RES_ERROR;
    }
    return result;
}

/** ゲストユーザがXooNiPsのPublicなアイテムを見ることができるかどうかを返す。
  */
static bool isGuestEnabled(){
    char *value = 0;
    result_t result = getConfigValue( XNP_CONFIG_PUBLIC_ITEM_TARGET_USER_KEY, &value );
    if ( result != RES_OK )
        return false;
    if ( value == 0 )
        return false;
    bool enabled = ( strcmp( value, XNP_CONFIG_PUBLIC_ITEM_TARGET_USER_ALL ) == 0 );
    freeString( value );
    return enabled;
}

/** sidからuidを得る。
  * @param sid session id 
  * @param uid uidを受け取る変数
  * @return RES_OK  
  *   sidは有効なsessionidである。この場合*uidには有効なuidが入る。
  *   あるいは、公開アイテムを非XooNiPsユーザに公開 かつsidがsession::SID_GUEST(=0)である。この場合、*uidにはaccount::UID_GUEST(=0)が入る。
  * @return その他            エラー
  */
static result_t sessionID2UID( sessionid_t sid, userid_t *uid ){
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    
    if ( sid == session::SID_GUEST ){
        if ( isGuestEnabled() ){
            *uid = account::UID_GUEST;
            return RES_OK;
        }
        return RES_NO_SUCH_SESSION;
    }
    else {
        string sql = "SELECT uid FROM " + dbprefix + "_xnpaccount_session WHERE sid=" + unsignedIntToString(sid);
        syslog_printf( "sql=%s", sql.c_str() );
        return queryGetUnsignedInt( "sessionID2UID", sql, uid );
    }
}


/**
 * 
 * gidの存在をチェック.
 * DBのアクセス失敗などもfalseとなる．
 * 
 * @param gid チェックしたいGID
 * @return true 存在する
 * @return false 存在しない
 * 
 */
static bool gidExists( groupid_t gid )
{
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) != SQL_SUCCESS ) {
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in gidExists" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        return false;
    }

    sql = "SELECT * FROM " + dbprefix + "_xnpaccount_groups ";
    sql += "WHERE gid=" + string( unsignedIntToString( gid ) );
    if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) != SQL_SUCCESS ){
        setLastErrorString( "SQLExecDirect in gidExists" );
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
        return false;
    }
    
    if( ( sqlcode = SQLFetch( hstmt ) ) != SQL_SUCCESS ){
        setLastErrorString( "SQLFetch in gidExists" );
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
        return false;
    }
    
    SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    return true;
}

    
/**
 * 
 * Platformユーザ情報にuidが存在するかをチェック.
 * DBのアクセス失敗などもfalseとなる．
 * 
 * @param uid チェックしたいUID
 * @return true 存在する
 * @return false 存在しない
 * 
 */
static bool uidExists( userid_t uid )
{
    bool ret = false;
    string sql;
    SQLRETURN sqlcode;
    
    sql = "SELECT * FROM " + dbprefix + "_xnpaccount_users ";
    sql += "WHERE uid=" + string( unsignedIntToString( uid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            if( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                ret = true;
            }else{
                string s( "SQLFetch in uidExists ");
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret = false;
            }
        }else{
            string s( "SQLExecDirect in uidExists ");
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += string( ", sql=" ) + string( sql );
            setLastErrorString( s.c_str( ) );
            ret = false;
        }
    }else{
        string s( "SQLAllocHandle in uidExists ");
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = false;
    }
    return ret;
}

    
/**
 * 
 * criteria を SQLに変換する
 * 
 * 
 * 
 */
string criteria2str( criteria* cri )
{
    string sql;
    
    const orderby* odrby = cri -> headOrderBy( );
    if( odrby != 0 ){
        sql += " ORDER BY " + string( odrby -> getColumn( ) );
        sql += ( odrby -> getOrder( ) == orderby::DESC ) ? " DESC" : " ";
        while( ( odrby = cri -> nextOrderBy( ) ) != 0 ){
            sql += ", " + string( odrby -> getColumn( ) );
            sql += ( odrby -> getOrder( ) == orderby::DESC ) ? " DESC" : " ";
        }
    }

    if( cri -> getLimitStart( ) != 0 || cri -> getLimitRows( ) != 0 ){
        sql += " LIMIT " + string( intToString( cri -> getLimitStart( ) ) )
            + ", " + string( intToString( cri -> getLimitRows( ) ) );
    }
    return sql;
}


/**
 * 
 * データベースの初期化
 * 
 * @param dsn DSN
 * @param user データベースにアクセスするユーザ名
 * @param password 上記ユーザのパスワード
 * @param dbname ダミー
 * @param prefix XOOPSデータベーステーブルのPREFIX
 * @param dbtype DBTYPE_MYSQL or DBTYPE_SQLITE
 * @return RES_OK
 * @return RES_DB_INITIALIZE_ERROR
 * @return RES_DB_CONNECT_ERROR
 * @refer result_t
 */
result_t initializeDB( const char* dsn, const char* user, const char* password, const char* dbname, const char* prefix, dbtype_t type )
{
    SQLRETURN sqlcode;

    // 既に接続中なら、一旦切断
    if ( hdbc != NULL )
        SQLDisconnect( hdbc );
    
    dbprefix = prefix;
    dbtype = type;
    
    // 初期化と接続
//    if( SQLAllocEnv( &henv ) != SQL_SUCCESS ) {
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_ENV, SQL_NULL_HANDLE, &henv ) ) != SQL_SUCCESS ) {
        string s( "SQLAllocHandle(SQL_HANDLE_ENV,...) in initializeDB" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        syslog_printf( "initializeDB %s", getLastErrorString( ) );
        return RES_DB_INITIALIZE_ERROR;
    }
    //ODBC Ver.3 として振舞うように属性を設定
    SQLSetEnvAttr(henv, SQL_ATTR_ODBC_VERSION, (void*)SQL_OV_ODBC3, 0); 
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_DBC, henv, &hdbc ) ) != SQL_SUCCESS ) {
        string s( "SQLAllocHandle(SQL_HANDLE_DBC,...) in initializeDB" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        syslog_printf( "initializeDB %s", getLastErrorString( ) );
        return RES_DB_INITIALIZE_ERROR;
    }
    //ログインに5秒以上要したらタイムアウトする設定
    SQLSetConnectAttr(hdbc, SQL_LOGIN_TIMEOUT, (SQLPOINTER *)5, 0);
    
    if ( ( sqlcode = SQLConnect( hdbc, (SQLCHAR*)dsn, strlen( dsn ), (SQLCHAR*)user, strlen( user ), (SQLCHAR*)password, strlen( password ) ) ) != SQL_SUCCESS ){
        string s( "SQLConnect in initializeDB " );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        syslog_printf( "initializeDB %s", getLastErrorString( ) );
        return RES_DB_CONNECT_ERROR;
    }
    syslog_printf( "initializeDB succeed" );
    return RES_OK;
}

/**
 *
 * DB接続があれば、それを開放する。
 * 
 * @param なし
 * @return RES_OK
 */
result_t uninitializeDB()
{
    if ( hdbc != NULL ){
        SQLDisconnect( hdbc );
        hdbc = NULL;
    }
    return RES_OK;
}

/**
 * 
 * Platformユーザ承認状態取得
 * 
 * @param sid セッションID
 * @param uid 状態を取得したいユーザのUID
 * @return true 承認済み
 * @return false 未承認
 * 
 */
bool isActivated( sessionid_t sid, userid_t uid )
{
    if( hdbc == NULL ) return false;
    if( !isValidSessionID( sid ) ) return false;
    
    bool ret = false;
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    
    sql = "SELECT * FROM " + dbprefix + "_xnpaccount_users ";
    sql += "WHERE activate=1 and uid=" + string( unsignedIntToString( uid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            if( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                ret = true;
            }else{
                string s( "SQLFetch in isActivated " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += ", sql=" + sql;
                setLastErrorString( s.c_str() );
                ret = false;
            }
        }else{
            string s( "SQLExecDirect in isActivated " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += ", sql=" + sql;
            setLastErrorString( s.c_str() );
            ret = false;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in isActivated" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = false;
    }
    return ret;
}

/**
 * 
 * Platformユーザ承認状態変更
 * 
 * @param sid セッションID
 * @param uid 変更したいユーザのUID
 * @param activate 承認(true) / 未承認(false)の指定
 * @return RES_OK
 * @return RES_DB_QUERY_ERROR
 * @return RES_NO_SUCH_USER
 */
result_t activate( sessionid_t sid, userid_t uid, bool activate )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    SQLRETURN sqlcode;
    result_t ret = RES_ERROR;
    
    sql = "UPDATE " + dbprefix + "_xnpaccount_users ";
    sql += "SET activate=" + string( activate ? "1" : "0" );
    sql += " WHERE uid=" + string( unsignedIntToString( uid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLLEN count = 0;
            if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                ret = RES_OK;
            }else{
                string s( "SQLRowCount in activate ");
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret = RES_NO_SUCH_USER;
            }
        }else{
            string s( "SQLExecDirect in activate " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += ", sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in activate" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = RES_ERROR;
    }
    return ret;
}

/**
 * 
 * アカウント数を取得する．
 * 
 * @param sid セッションID
 * @return アカウント数
 * 
 */
int getAccountCount( sessionid_t sid )
{
    if( hdbc == NULL ) return 0;
    if( !isValidSessionID( sid ) ) return 0;
    
    int ret = 0;
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    
    //アカウント数を求める
    sql = "SELECT COUNT(*) FROM " + dbprefix + "_xnpaccount_users ";
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLUINTEGER count = 0;
            SQLLEN len = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &count, 0, &len );
            if( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                ret = count;
            }else {
                string s( "SQLFetch in getAccountCount sql=" );
                s += string( sql );
                setLastErrorString( s.c_str( ) );
                ret = 0;
            }
        }else{
            setLastErrorString( "SQLExecDirect in getAccountCount" );
            ret = 0;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in getAccountCount" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = 0;
    }
    return ret;
}

/**
 * 
 * アカウント削除
 * グループからの削除とユーザ情報の削除を行ないます．
 * 
 * @param 
 * @return RES_OK
 * @return RES_ERROR
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t deleteAccount( sessionid_t sid, userid_t uid )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;

    result_t ret1 = RES_ERROR, ret2 = RES_ERROR;
    criteria_t c;
    string sql;
    groupid_t* gids;
    int gidsLen;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    
    /*
      1. delete user from default platform group
      2. delete user profile from xoops_users
      3. delete platform user from xnpaccount_users
     */
    
    //1. delete user from platform groups
    c.clearAll();
    if( getGroupsByUid( sid, uid, &c, &gids, &gidsLen ) == RES_OK ){
        for( int i = 0; i < gidsLen; i++ )
            deleteMemberNoLimit( sid, gids[ i ], uid );
        freeGID( gids );
    }
    
    //2. delete user profile from xoops_users
    sql = "DELETE FROM " + dbprefix + "_users ";
    sql += "WHERE uid = " + string( unsignedIntToString( uid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLLEN count = 0;
            if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                ret1 = RES_OK;
            }else{
                string s( "SQLRowCount in deleteAccount" );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret1 = RES_NO_SUCH_USER;
            }
        }else{
            string s( "SQLExecDirect in deleteAccount" );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += ", sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret1 = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in deleteAccount" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret1 = RES_ERROR;
    }
    
    //3. delete platform user from xnpaccount_users
    sql = "DELETE FROM " + dbprefix + "_xnpaccount_users ";
    sql += "WHERE uid = " + string( unsignedIntToString( uid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLLEN count = 0;
            if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                ret2 = RES_OK;
            }else{
                string s( "SQLRowCount in deleteAccount" );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret2 = RES_NO_SUCH_USER;
            }
        }else{
            string s( "SQLExecDirect in deleteAccount" );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += ", sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret2 = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in deleteAccount" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret2 = RES_ERROR;
    }
    
    //一方でもエラーならエラーを返す
    return ret1 != RES_OK ? ret1 : ret2;
}

/**
 * 
 * アカウント情報取得
 * 
 * @param sid セッションID
 * @param uid 取得したいユーザのUID
 * @param acc 取得したアカウント情報(account_t)のポインタを書き込む引数
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_USER
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t getAccount( sessionid_t sid, userid_t uid, const account_t** acc )
{
    int len;
    static criteria c;
    result_t res = getAccounts( sid, &uid, 1, &c, acc, &len );
    if( len == 0 ) return RES_NO_SUCH_USER;
    return res;
}

/**
 * 
 * アカウント情報取得
 * 
 * @param sid セッションID
 * @param uids 取得したいユーザのUIDの配列
 * @param uidsLen uids配列の要素数
 * @param cri 結果の範囲指定，ソート条件指定
 * @param accounts 検索結果の配列のポインタを書き込む引数
 * @param accountsLen 検索結果の数(配列*accountsの要素数)
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t getAccounts( sessionid_t sid, const userid_t* uids, int uidsLen, criteria_t* cri, const account_t** accounts, int* accountsLen )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( uidsLen <= 0 ){
        *accounts = new account_t[ 0 ];
        *accountsLen = 0;
    syslog_printf( "getAccounts succeed len=0" );
        return RES_OK;
    }
    
    syslog_printf( "begin of getAccounts" );
    result_t ret = RES_ERROR;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    string sql;
    account_t* dst = new account_t[ uidsLen ];
    
    sql += "SELECT u1.uid, u1.name, u1.uname, u1.email, u1.url, u1.user_avatar, u1.user_regdate, u1.user_icq, u1.user_from, u1.user_sig, u1.user_viewemail, u1.actkey, u1.user_aim, u1.user_yim, u1.user_msnm, u1.pass, u1.posts, u1.attachsig, u1.rank, u1.level, u1.theme, u1.timezone_offset, u1.last_login, u1.umode, u1.uorder, u1.notify_method, u1.notify_mode, u1.user_occ, u1.bio, u1.user_intrest, u1.user_mailok, u2.activate, u2.address, u2.division, u2.tel, u2.company_name, u2.country, u2.zipcode, u2.fax, u2.notice_mail, u2.notice_mail_since, u2.private_index_id, u2.private_item_number_limit, u2.private_index_number_limit, u2.private_item_storage_limit ";
    sql += "FROM " + dbprefix + "_users AS u1, " + dbprefix + "_xnpaccount_users AS u2 ";
    sql += "WHERE u1.uid = u2.uid ";
    if( uidsLen > 0 ){
        syslog_printf( "set uid[%d] value=%d to ...", 0, uids[0] );
        sql += "AND ( u1.uid=" + string( unsignedIntToString( uids[ 0 ] ) );
        for( int i = 1; i < uidsLen; i++ ){
            syslog_printf( "set uid[%d] value=%d to ...", i, uids[i] );
            sql += " OR u1.uid=" + string( unsignedIntToString( uids[ i ] ) );
        }
        sql += " ) ";
    }
    sql += criteria2str( cri );
    syslog_printf( "sql=%s", sql.c_str() );
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        syslog_printf( "SQLAllocHandle" );
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            syslog_printf( "SQLExecDirect" );
            SQLLEN cbUid = 0, cbStorageLimit = 0;
            userid_t uid = 0;
            SQLDOUBLE storage_limit = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &uid, 0, &cbUid );
            SQLBindCol( hstmt, 45, SQL_C_DOUBLE, &storage_limit, 0, &cbStorageLimit );
            syslog_printf( "SQLBindCol" );
            *accountsLen=0;
            for( int i = 0; ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS && i < uidsLen ; i++ ){
                syslog_printf( "SQLFetch" );
                dst[ i ].setUID( uid );
                dst[ i ].setName( getResultCol( hstmt, 2 ).c_str() );
                dst[ i ].setUname( getResultCol( hstmt, 3 ).c_str() );
                dst[ i ].setEmail( getResultCol( hstmt, 4 ).c_str() );
                dst[ i ].setURL( getResultCol( hstmt, 5 ).c_str() );
                dst[ i ].setUserAvatar( getResultCol( hstmt, 6 ).c_str() );
                dst[ i ].setUserRegdate( atoi( getResultCol( hstmt, 7 ).c_str() ) );
                dst[ i ].setUserIcq( getResultCol( hstmt, 8 ).c_str() );
                dst[ i ].setUserFrom( getResultCol( hstmt, 9 ).c_str() );
                dst[ i ].setUserSig( getResultCol( hstmt, 10 ).c_str() );
                dst[ i ].setUserViewemail( atoi( getResultCol( hstmt, 11 ).c_str() ));
                dst[ i ].setActkey( getResultCol( hstmt, 12 ).c_str() );
                dst[ i ].setUserAim( getResultCol( hstmt, 13 ).c_str() );
                dst[ i ].setUserYim( getResultCol( hstmt, 14 ).c_str() );
                dst[ i ].setUserMsnm( getResultCol( hstmt, 15 ).c_str() );
                dst[ i ].setPass( getResultCol( hstmt, 16 ).c_str() );
                dst[ i ].setPosts( atoi( getResultCol( hstmt, 17 ).c_str() ));
                dst[ i ].setAttachsig( atoi( getResultCol( hstmt, 18 ).c_str() ));
                dst[ i ].setRank( atoi( getResultCol( hstmt, 19 ).c_str() ));
                dst[ i ].setLevel( atoi( getResultCol( hstmt, 20 ).c_str() ));
                dst[ i ].setTheme( getResultCol( hstmt, 21 ).c_str() );
                dst[ i ].setTimezoneOffset( atof( getResultCol( hstmt, 22 ).c_str() ) );
                dst[ i ].setLastLogin( atoi( getResultCol( hstmt, 23 ).c_str() ));
                dst[ i ].setUmode( getResultCol( hstmt, 24 ).c_str() );
                dst[ i ].setUorder( atoi( getResultCol( hstmt, 25 ).c_str() ));
                dst[ i ].setNotifyMethod( atoi( getResultCol( hstmt, 26 ).c_str() ));
                dst[ i ].setNotifyMode( atoi( getResultCol( hstmt, 27 ).c_str() ));
                dst[ i ].setUserOcc( getResultCol( hstmt, 28 ).c_str() );
                dst[ i ].setBio( getResultCol( hstmt, 29 ).c_str() );
                dst[ i ].setUserIntrest( getResultCol( hstmt, 30 ).c_str() );
                dst[ i ].setUserMailok( atoi( getResultCol( hstmt, 31 ).c_str() ));
                dst[ i ].setActivate( atoi( getResultCol( hstmt, 32 ).c_str() ));
                dst[ i ].setAddress( getResultCol( hstmt, 33 ).c_str() );
                dst[ i ].setDivision( getResultCol( hstmt, 34 ).c_str() );
                dst[ i ].setTel( getResultCol( hstmt, 35 ).c_str() );
                dst[ i ].setCompanyName( getResultCol( hstmt, 36 ).c_str() );
                dst[ i ].setCountry( getResultCol( hstmt, 37 ).c_str() );
                dst[ i ].setZipcode( getResultCol( hstmt, 38 ).c_str() );
                dst[ i ].setFax( getResultCol( hstmt, 39 ).c_str() );
                dst[ i ].setNoticeMail( atoi( getResultCol( hstmt, 40 ).c_str() ));
                dst[ i ].setNoticeMailSince( atoi( getResultCol( hstmt, 41 ).c_str() ));
                dst[ i ].setPrivateIndexID( atoi( getResultCol( hstmt, 42 ).c_str() ));
                dst[ i ].setItemNumberLimit( atoi( getResultCol( hstmt, 43 ).c_str() ));
                dst[ i ].setIndexNumberLimit( atoi( getResultCol( hstmt, 44 ).c_str() ));
                dst[ i ].setItemStorageLimit( storage_limit );
                ( *accountsLen )++;
            }
            *accounts = dst;
            syslog_printf( "getAccounts succeed" );
            ret = RES_OK;
        }else{
            string s( "SQLExecDirect in getAccounts" );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += string( ", sql=" ) + string( sql );
            setLastErrorString( s.c_str( ) );
            syslog_printf( "getAccounts %s", getLastErrorString( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in getAccounts" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        syslog_printf( "getAccounts %s", getLastErrorString( ) );
        ret = RES_DB_QUERY_ERROR;
    }
    return ret;
}

/**
 * 
 * アカウント登録.
 * 
 * ユーザ情報をデータベースに登録します．
 * 登録したユーザ情報に対応するユーザIDをuidに格納します．
 * 
 * @param sid セッション
 * @param account 登録するアカウント情報
 * @param uid 登録したアカウント情報に対応するユーザID
 * @return RES_OK
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * @return RES_DB_NOT_INITIALIZED
 * 
 */
result_t insertAccount( sessionid_t sid, const account_t* account, userid_t* uid )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    string sql;
    string tmp;
    SQLRETURN sqlcode;
    result_t ret = RES_ERROR;
    
    /*
      1. insert user profile into xoops_users
      2. insert platform user profile into xnpaccount_users
      3. add user to default platform group
      4. create private index
      5. update account set private_index_id=...
     */
    
    //1.xoopsのユーザテーブルに書き込む
    SQLCHAR uname[ACCOUNT_UNAME_LEN+1], name[ACCOUNT_NAME_LEN+1], email[ACCOUNT_EMAIL_LEN+1], url[ACCOUNT_URL_LEN+1], user_avatar[ACCOUNT_USER_AVATAR_LEN+1], user_icq[ACCOUNT_USER_ICQ_LEN+1], user_from[ACCOUNT_USER_FROM_LEN+1], user_sig[ACCOUNT_USER_SIG_LEN+1], actkey[ACCOUNT_ACTKEY_LEN+1], user_aim[ACCOUNT_USER_AIM_LEN+1], user_yim[ACCOUNT_USER_YIM_LEN+1], user_msnm[ACCOUNT_USER_MSNM_LEN+1], pass[ACCOUNT_PASS_LEN+1], theme[ACCOUNT_THEME_LEN+1], umode[ACCOUNT_UMODE_LEN+1], user_occ[ACCOUNT_USER_OCC_LEN+1], bio[ACCOUNT_BIO_LEN+1], user_intrest[ACCOUNT_USER_INTREST_LEN+1];
    SQLINTEGER user_regdate, user_viewemail, posts, attachsig, rank, level, last_login, uorder, notify_method, notify_mode, user_mailok;
    SQLDOUBLE timezone_offset;
    
    SQLLEN cbUname = SQL_NTS, cbName = SQL_NTS, cbEmail = SQL_NTS, cbUrl = SQL_NTS, cbUser_avatar = SQL_NTS, cbUser_icq = SQL_NTS, cbUser_from = SQL_NTS, cbUser_sig = SQL_NTS, cbActkey = SQL_NTS, cbUser_aim = SQL_NTS, cbUser_yim = SQL_NTS, cbUser_msnm = SQL_NTS, cbPass = SQL_NTS, cbTheme = SQL_NTS, cbUmode = SQL_NTS, cbUser_occ = SQL_NTS, cbBio = SQL_NTS, cbUser_intrest = SQL_NTS;
    SQLLEN cbUser_regdate = 0, cbUser_viewemail = 0, cbPosts = 0, cbAttachsig = 0, cbRank = 0, cbLevel = 0, cbLast_login = 0, cbUorder = 0, cbNotify_method = 0, cbNotify_mode = 0, cbUser_mailok = 0, cbTimezone_offset = 0;

    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        string sql;
        sql = "INSERT INTO " + dbprefix + "_users (uname, name, email, url, user_avatar, user_regdate, user_icq, user_from, user_sig, user_viewemail, actkey, user_aim, user_yim, user_msnm, pass, posts, attachsig, rank, level, theme, timezone_offset, last_login, umode, uorder, notify_method, notify_mode, user_occ, bio, user_intrest, user_mailok) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)";
        sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
        if( sqlcode == SQL_SUCCESS || sqlcode == SQL_SUCCESS_WITH_INFO ){
            SQLBindParameter(hstmt,  1, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_UNAME_LEN, 0, uname, 0, &cbUname );
            SQLBindParameter(hstmt,  2, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_NAME_LEN, 0, name, 0, &cbName );
            SQLBindParameter(hstmt,  3, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_EMAIL_LEN, 0, email, 0, &cbEmail );
            SQLBindParameter(hstmt,  4, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_URL_LEN, 0, url, 0, &cbUrl );
            SQLBindParameter(hstmt,  5, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_AVATAR_LEN, 0, user_avatar, 0, &cbUser_avatar );
            SQLBindParameter(hstmt,  6, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &user_regdate, 0, &cbUser_regdate );
            SQLBindParameter(hstmt,  7, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_ICQ_LEN, 0, user_icq, 0, &cbUser_icq );
            SQLBindParameter(hstmt,  8, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_FROM_LEN, 0, user_from, 0, &cbUser_from );
            SQLBindParameter(hstmt,  9, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_SIG_LEN, 0, user_sig, 0, &cbUser_sig );
            SQLBindParameter(hstmt, 10, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &user_viewemail, 0, &cbUser_viewemail );
            SQLBindParameter(hstmt, 11, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_ACTKEY_LEN, 0, actkey, 0, &cbActkey );
            SQLBindParameter(hstmt, 12, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_AIM_LEN, 0, user_aim, 0, &cbUser_aim );
            SQLBindParameter(hstmt, 13, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_YIM_LEN, 0, user_yim, 0, &cbUser_yim );
            SQLBindParameter(hstmt, 14, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_MSNM_LEN, 0, user_msnm, 0, &cbUser_msnm );
            SQLBindParameter(hstmt, 15, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_PASS_LEN, 0, pass, 0, &cbPass );
            SQLBindParameter(hstmt, 16, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &posts, 0, &cbPosts );
            SQLBindParameter(hstmt, 17, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &attachsig, 0, &cbAttachsig );
            SQLBindParameter(hstmt, 18, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &rank, 0, &cbRank );
            SQLBindParameter(hstmt, 19, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &level, 0, &cbLevel );
            SQLBindParameter(hstmt, 20, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_THEME_LEN, 0, theme, 0, &cbTheme );
            SQLBindParameter(hstmt, 21, SQL_PARAM_INPUT, SQL_C_DOUBLE, SQL_DOUBLE, 0, 0, &timezone_offset, 0, &cbTimezone_offset );
            SQLBindParameter(hstmt, 22, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &last_login, 0, &cbLast_login );
            SQLBindParameter(hstmt, 23, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_UMODE_LEN, 0, umode, 0, &cbUmode );
            SQLBindParameter(hstmt, 24, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &uorder, 0, &cbUorder );
            SQLBindParameter(hstmt, 25, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &notify_method, 0, &cbNotify_method );
            SQLBindParameter(hstmt, 26, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &notify_mode, 0, &cbNotify_mode );
            SQLBindParameter(hstmt, 27, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_OCC_LEN, 0, user_occ, 0, &cbUser_occ );
            SQLBindParameter(hstmt, 28, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_BIO_LEN, 0, bio, 0, &cbBio );
            SQLBindParameter(hstmt, 29, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_INTREST_LEN, 0, user_intrest, 0, &cbUser_intrest );
            SQLBindParameter(hstmt, 30, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &user_mailok, 0, &cbUser_mailok );

            strncpy2( (char*)uname, account -> getUname( ), ACCOUNT_UNAME_LEN );
            strncpy2( (char*)name, account -> getName( ), ACCOUNT_NAME_LEN );
            strncpy2( (char*)email, account -> getEmail( ), ACCOUNT_EMAIL_LEN );
            strncpy2( (char*)url, account -> getURL( ), ACCOUNT_URL_LEN );
            strncpy2( (char*)user_avatar, account -> getUserAvatar( ), ACCOUNT_USER_AVATAR_LEN );
            user_regdate = time( NULL );
            strncpy2( (char*)user_icq, account -> getUserIcq( ), ACCOUNT_USER_ICQ_LEN );
            strncpy2( (char*)user_from, account -> getUserFrom( ), ACCOUNT_USER_FROM_LEN );
            strncpy2( (char*)user_sig, account -> getUserSig( ), ACCOUNT_USER_SIG_LEN );
            user_viewemail = account -> getUserViewemail( );
            strncpy2( (char*)actkey, account -> getActkey( ), ACCOUNT_ACTKEY_LEN );
            strncpy2( (char*)user_aim, account -> getUserAim( ), ACCOUNT_USER_AIM_LEN );
            strncpy2( (char*)user_yim, account -> getUserYim( ), ACCOUNT_USER_YIM_LEN );
            strncpy2( (char*)user_msnm, account -> getUserMsnm( ), ACCOUNT_USER_MSNM_LEN );
            strncpy2( (char*)pass, account -> getPass( ), ACCOUNT_PASS_LEN );
            posts = account -> getPosts( );
            attachsig = account -> getAttachsig( );
            rank = account -> getRank( );
            level = account -> getLevel( );
            strncpy2( (char*)theme, account -> getTheme( ), ACCOUNT_THEME_LEN );
            timezone_offset = account -> getTimezoneOffset( );
            last_login = 0;
            strncpy2( (char*)umode, account -> getUmode( ), ACCOUNT_UMODE_LEN );
            uorder = account -> getUorder( );
            notify_method = account -> getNotifyMethod( );
            notify_mode = account -> getNotifyMode( );
            strncpy2( (char*)user_occ, account -> getUserOcc( ), ACCOUNT_USER_OCC_LEN );
            strncpy2( (char*)bio, account -> getBio( ), ACCOUNT_BIO_LEN );
            strncpy2( (char*)user_intrest, account -> getUserIntrest( ), ACCOUNT_USER_INTREST_LEN );
            user_mailok = account -> getUserMailok( );

            if( ( sqlcode = SQLExecute( hstmt ) ) == SQL_SUCCESS ){
                SQLLEN count = 0;
                if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                    //ユーザIDを取得する
                    if( dbtype == DBTYPE_MYSQL ){
                        sql = "SELECT LAST_INSERT_ID()";
                    }else if( dbtype == DBTYPE_SQLITE ){
                        sql = "SELECT LAST_INSERT_ROWID()";
                    }
                    ret = queryGetUnsignedInt( "insertAccount", sql, (unsigned int*)uid );
                }else{
                    string s( "SQLRowCount in insertAccount sql=" );
                    s += string( sql );
                    setLastErrorString( s.c_str( ) );
                    ret = RES_DB_QUERY_ERROR;
                }
            }else{
                string s( "SQLExecute in insertAccount " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            string s( "SQLPrepare in insertAccount " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            setLastErrorString( s.c_str( ) );
            ret = RES_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in insertAccount" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = RES_ERROR;
    }
    
    if( ret == RES_OK ){
        //2.xnpaccountのユーザテーブルに残りの情報を書き込む
        SQLUINTEGER activate;
        SQLCHAR address[XNP_ACCOUNT_ADDRESS_LEN+1];
        SQLCHAR division[XNP_ACCOUNT_DIVISION_LEN+1];
        SQLCHAR tel[XNP_ACCOUNT_TEL_LEN+1];
        SQLCHAR company_name[XNP_ACCOUNT_COMPANY_NAME_LEN+1];
        SQLCHAR country[XNP_ACCOUNT_COUNTRY_LEN+1];
        SQLCHAR zipcode[XNP_ACCOUNT_ZIPCODE_LEN+1];
        SQLCHAR fax[XNP_ACCOUNT_FAX_LEN+1];
        SQLLEN cbAddress = SQL_NTS, cbDivision = SQL_NTS, cbTel = SQL_NTS, cbCompany_name = SQL_NTS, cbCountry = SQL_NTS, cbZipcode = SQL_NTS, cbFax = SQL_NTS;
        SQLLEN cbUid = 0, cbActivate = 0, cbNotice_mail = 0, cbNotice_mail_since = 0, cbItem_number_limit = 0, cbIndex_number_limit = 0, cbItem_storage_limit = 0;
        SQLUINTEGER notice_mail;
        SQLUINTEGER notice_mail_since;
        SQLINTEGER item_number_limit;
        SQLINTEGER index_number_limit;
        SQLDOUBLE item_storage_limit;

        if( ret == RES_OK && ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
            string sql;
            sql = "INSERT INTO " + dbprefix + "_xnpaccount_users (uid, activate, address, division, tel, company_name, country, zipcode, fax, notice_mail, notice_mail_since, private_item_number_limit, private_index_number_limit, private_item_storage_limit) VALUES ( ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ? )";
            sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
            if( sqlcode == SQL_SUCCESS || sqlcode == SQL_SUCCESS_WITH_INFO ){
                SQLBindParameter(hstmt, 1, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, uid, 0, &cbUid);
                SQLBindParameter(hstmt, 2, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &activate, 0, &cbActivate);
                SQLBindParameter(hstmt, 3, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_ADDRESS_LEN, 0, address, 0, &cbAddress); 
                SQLBindParameter(hstmt, 4, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_DIVISION_LEN, 0, division, 0, &cbDivision); 
                SQLBindParameter(hstmt, 5, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_TEL_LEN, 0, tel, 0, &cbTel); 
                SQLBindParameter(hstmt, 6, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_COMPANY_NAME_LEN, 0, company_name, 0, &cbCompany_name); 
                SQLBindParameter(hstmt, 7, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_COUNTRY_LEN, 0, country, 0, &cbCountry); 
                SQLBindParameter(hstmt, 8, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_ZIPCODE_LEN, 0, zipcode, 0, &cbZipcode); 
                SQLBindParameter(hstmt, 9, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_FAX_LEN, 0, fax, 0, &cbFax); 
                SQLBindParameter(hstmt, 10, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &notice_mail, 0, &cbNotice_mail);
                SQLBindParameter(hstmt, 11, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &notice_mail_since, 0, &cbNotice_mail_since);
                SQLBindParameter(hstmt, 12, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &item_number_limit, 0, &cbItem_number_limit);
                SQLBindParameter(hstmt, 13, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &index_number_limit, 0, &cbIndex_number_limit);
                SQLBindParameter(hstmt, 14, SQL_PARAM_INPUT, SQL_C_DOUBLE, SQL_DOUBLE, 0, 0, &item_storage_limit, 0, &cbItem_storage_limit);
            
                activate = account -> getActivate() ? 1 : 0;
                strncpy2( (char*)address, account -> getAddress(), XNP_ACCOUNT_ADDRESS_LEN );
                strncpy2( (char*)division, account -> getDivision(), XNP_ACCOUNT_DIVISION_LEN );
                strncpy2( (char*)tel, account -> getTel(), XNP_ACCOUNT_TEL_LEN );
                strncpy2( (char*)company_name, account -> getCompanyName(), XNP_ACCOUNT_COMPANY_NAME_LEN );
                strncpy2( (char*)country, account -> getCountry(), XNP_ACCOUNT_COUNTRY_LEN );
                strncpy2( (char*)zipcode, account -> getZipcode(), XNP_ACCOUNT_ZIPCODE_LEN );
                strncpy2( (char*)fax, account -> getFax(), XNP_ACCOUNT_FAX_LEN );
                notice_mail = account -> getNoticeMail( );
                notice_mail_since = time( NULL );
                item_number_limit = account -> getItemNumberLimit( );
                index_number_limit = account -> getIndexNumberLimit( );
                item_storage_limit = account -> getItemStorageLimit( );
            
                if( ( sqlcode = SQLExecute( hstmt ) ) == SQL_SUCCESS ){
                    SQLLEN count = 0;
                    if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                        ret = RES_OK;
                        if( ret == RES_OK ){
                            //3.add new user to default group(not a group admin)
                            ret = insertMember( sid, group_t::GID_DEFAULT, *uid, false );
                        }else{
                            //xoops_usersへinsertしたレコードを削除する
                            sql = "DELETE FROM " + dbprefix + "_users where uid=";
                            sql += unsignedIntToString( *uid );
                            SQLHANDLE hstmt2 = NULL;
                            if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt2 ) ) == SQL_SUCCESS ) {
                                SQLExecDirect( hstmt2, (SQLCHAR*)sql.c_str(), sql.length() );
                                SQLFreeHandle( SQL_HANDLE_STMT, hstmt2 );
                            }
                            setLastErrorString( "insertMember in insertAccount" );
                            ret = RES_DB_QUERY_ERROR;
                        }
                    }else{
                        string s( "SQLRowCount in insertAccount sql=" );
                        s += string( sql );
                        setLastErrorString( s.c_str( ) );
                        ret = RES_DB_QUERY_ERROR;
                    }
                }else{
                    string s( "SQLExecute in insertAccount " );
                    s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                    setLastErrorString( s.c_str( ) );
                    ret = RES_DB_QUERY_ERROR;
                }
            }else{
                //xoops_usersへinsertしたレコードを削除する
                sql = "DELETE FROM " + dbprefix + "_users where uid=";
                sql += unsignedIntToString( *uid );
                SQLHANDLE hstmt2 = NULL;
                if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt2 ) ) == SQL_SUCCESS ) {
                    SQLExecDirect( hstmt2, (SQLCHAR*)sql.c_str(), sql.length() );
                    SQLFreeHandle( SQL_HANDLE_STMT, hstmt2 );
                }
                string s( "SQLExecDirect in insertAccount sql=" );
                s += string( sql );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
            SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
        }else{
            string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in insertAccount" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
            ret = RES_ERROR;
        }
    }
    
    if ( ret == RES_OK ){
        //4.private indexを作成
        
        // private index用のsort_number生成
        string sql = "select min(sort_number) from " + 
          dbprefix + "_xnpaccount_index where parent_index_id=" + unsignedIntToString(item::IID_ROOT) + 
          " and open_level=" + unsignedIntToString(index::OL_PRIVATE);
        unsigned int sortNumber;
        ret = queryGetUnsignedInt( "insertAccount", sql, &sortNumber );
        sortNumber--;
        if ( ret == RES_OK ){
            // private index作成
            index_t index;
            index.setItemTypeID(item::ITID_INDEX);
            index.setContributorUID(*uid);
            index.setParentIndexID(item::IID_ROOT);
            index.setOwnerUID(*uid);
            index.setOpenLevel(index::OL_PRIVATE);
            index.setSortNumber(sortNumber);
            index.setTitle(account->getUname());
            indexid_t privateXID;
            ret = insertIndexInternal( sid, &index, &privateXID );
            if ( ret == RES_OK ){
                // xnpaccuont_usersのprivate_index_idの書き換え
                sql = "UPDATE " + dbprefix + "_xnpaccount_users SET private_index_id=" 
                  + unsignedIntToString(privateXID) + " WHERE uid=" + unsignedIntToString(*uid);
                ret = querySimple( "insertAccount", sql );
            }
        }
    }
    
    return ret;
}

/**
 * 
 * アカウント情報を変更する.
 * 
 * 
 * @param sid セッションID
 * @param account 変更したいアカウント情報
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * @return RES_NO_SUCH_USER
 * @return RES_ERROR
 * 
 */
result_t updateAccount( sessionid_t sid, const account_t* account )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( account == NULL ) return RES_ERROR;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !uidExists( account -> getUID( ) ) ) return RES_NO_SUCH_USER;

    SQLRETURN sqlcode;
    result_t ret = RES_ERROR;
    SQLHANDLE hstmt = NULL;
    
    //xoopsのユーザテーブルに書き込む
    SQLCHAR uname[ACCOUNT_UNAME_LEN+1], name[ACCOUNT_NAME_LEN+1], email[ACCOUNT_EMAIL_LEN+1], url[ACCOUNT_URL_LEN+1], user_avatar[ACCOUNT_USER_AVATAR_LEN+1], user_icq[ACCOUNT_USER_ICQ_LEN+1], user_from[ACCOUNT_USER_FROM_LEN+1], user_sig[ACCOUNT_USER_SIG_LEN+1], actkey[ACCOUNT_ACTKEY_LEN+1], user_aim[ACCOUNT_USER_AIM_LEN+1], user_yim[ACCOUNT_USER_YIM_LEN+1], user_msnm[ACCOUNT_USER_MSNM_LEN+1], pass[ACCOUNT_PASS_LEN+1], theme[ACCOUNT_THEME_LEN+1], umode[ACCOUNT_UMODE_LEN+1], user_occ[ACCOUNT_USER_OCC_LEN+1], bio[ACCOUNT_BIO_LEN+1], user_intrest[ACCOUNT_USER_INTREST_LEN+1];
    SQLINTEGER uid, user_regdate, user_viewemail, posts, attachsig, rank, level, last_login, uorder, notify_method, notify_mode, user_mailok;
    SQLDOUBLE timezone_offset;
    
    SQLLEN cbUname = SQL_NTS, cbName = SQL_NTS, cbEmail = SQL_NTS, cbUrl = SQL_NTS, cbUser_avatar = SQL_NTS, cbUser_icq = SQL_NTS, cbUser_from = SQL_NTS, cbUser_sig = SQL_NTS, cbActkey = SQL_NTS, cbUser_aim = SQL_NTS, cbUser_yim = SQL_NTS, cbUser_msnm = SQL_NTS, cbPass = SQL_NTS, cbTheme = SQL_NTS, cbUmode = SQL_NTS, cbUser_occ = SQL_NTS, cbBio = SQL_NTS, cbUser_intrest = SQL_NTS;
    SQLLEN cbUid = 0, cbUser_regdate = 0, cbUser_viewemail = 0, cbPosts = 0, cbAttachsig = 0, cbRank = 0, cbLevel = 0, cbLast_login = 0, cbUorder = 0, cbNotify_method = 0, cbNotify_mode = 0, cbUser_mailok = 0, cbTimezone_offset = 0;

    SQLUINTEGER activate;
    SQLCHAR address[XNP_ACCOUNT_ADDRESS_LEN+1];
    SQLCHAR division[XNP_ACCOUNT_DIVISION_LEN+1];
    SQLCHAR tel[XNP_ACCOUNT_TEL_LEN+1];
    SQLCHAR company_name[XNP_ACCOUNT_COMPANY_NAME_LEN+1];
    SQLCHAR country[XNP_ACCOUNT_COUNTRY_LEN+1];
    SQLCHAR zipcode[XNP_ACCOUNT_ZIPCODE_LEN+1];
    SQLCHAR fax[XNP_ACCOUNT_FAX_LEN+1];
    SQLLEN cbActivate = 0, cbAddress = SQL_NTS, cbDivision = SQL_NTS, cbTel = SQL_NTS, cbCompany_name = SQL_NTS, cbCountry = SQL_NTS, cbZipcode = SQL_NTS, cbFax = SQL_NTS;
    SQLUINTEGER notice_mail, notice_mail_since;
    SQLLEN cbNotice_mail = 0, cbNotice_mail_since = 0;

    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        string sql;

        sql = "UPDATE " + dbprefix + "_users SET ";
        sql += "uname=?";
        sql += ", name=?";
        sql += ", email=?";
        sql += ", url=?";
        sql += ", user_avatar=?";
        sql += ", user_regdate=?";
        sql += ", user_icq=?";
        sql += ", user_from=?";
        sql += ", user_sig=?";
        sql += ", user_viewemail=?";
        sql += ", actkey=?";
        sql += ", user_aim=?";
        sql += ", user_yim=?";
        sql += ", user_msnm=?";
        sql += ", pass=?";
        sql += ", posts=?";
        sql += ", attachsig=?";
        sql += ", rank=?";
        sql += ", level=?";
        sql += ", theme=?";
        sql += ", timezone_offset=?";
        sql += ", last_login=?";
        sql += ", umode=?";
        sql += ", uorder=?";
        sql += ", notify_method=?";
        sql += ", notify_mode=?";
        sql += ", user_occ=?";
        sql += ", bio=?";
        sql += ", user_intrest=?";
        sql += ", user_mailok=? ";
        sql += " WHERE uid = ?";

        sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
        if( sqlcode == SQL_SUCCESS || sqlcode == SQL_SUCCESS_WITH_INFO ){
            SQLBindParameter(hstmt,  1, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_UNAME_LEN, 0, uname, 0, &cbUname );
            SQLBindParameter(hstmt,  2, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_NAME_LEN, 0, name, 0, &cbName );
            SQLBindParameter(hstmt,  3, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_EMAIL_LEN, 0, email, 0, &cbEmail );
            SQLBindParameter(hstmt,  4, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_URL_LEN, 0, url, 0, &cbUrl );
            SQLBindParameter(hstmt,  5, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_AVATAR_LEN, 0, user_avatar, 0, &cbUser_avatar );
            SQLBindParameter(hstmt,  6, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &user_regdate, 0, &cbUser_regdate );
            SQLBindParameter(hstmt,  7, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_ICQ_LEN, 0, user_icq, 0, &cbUser_icq );
            SQLBindParameter(hstmt,  8, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_FROM_LEN, 0, user_from, 0, &cbUser_from );
            SQLBindParameter(hstmt,  9, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_SIG_LEN, 0, user_sig, 0, &cbUser_sig );
            SQLBindParameter(hstmt, 10, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &user_viewemail, 0, &cbUser_viewemail );
            SQLBindParameter(hstmt, 11, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_ACTKEY_LEN, 0, actkey, 0, &cbActkey );
            SQLBindParameter(hstmt, 12, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_AIM_LEN, 0, user_aim, 0, &cbUser_aim );
            SQLBindParameter(hstmt, 13, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_YIM_LEN, 0, user_yim, 0, &cbUser_yim );
            SQLBindParameter(hstmt, 14, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_MSNM_LEN, 0, user_msnm, 0, &cbUser_msnm );
            SQLBindParameter(hstmt, 15, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_PASS_LEN, 0, pass, 0, &cbPass );
            SQLBindParameter(hstmt, 16, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &posts, 0, &cbPosts );
            SQLBindParameter(hstmt, 17, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &attachsig, 0, &cbAttachsig );
            SQLBindParameter(hstmt, 18, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &rank, 0, &cbRank );
            SQLBindParameter(hstmt, 19, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &level, 0, &cbLevel );
            SQLBindParameter(hstmt, 20, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_THEME_LEN, 0, theme, 0, &cbTheme );
            SQLBindParameter(hstmt, 21, SQL_PARAM_INPUT, SQL_C_DOUBLE, SQL_DOUBLE, 0, 0, &timezone_offset, 0, &cbTimezone_offset );
            SQLBindParameter(hstmt, 22, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &last_login, 0, &cbLast_login );
            SQLBindParameter(hstmt, 23, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_UMODE_LEN, 0, umode, 0, &cbUmode );
            SQLBindParameter(hstmt, 24, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &uorder, 0, &cbUorder );
            SQLBindParameter(hstmt, 25, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &notify_method, 0, &cbNotify_method );
            SQLBindParameter(hstmt, 26, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &notify_mode, 0, &cbNotify_mode );
            SQLBindParameter(hstmt, 27, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_OCC_LEN, 0, user_occ, 0, &cbUser_occ );
            SQLBindParameter(hstmt, 28, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_BIO_LEN, 0, bio, 0, &cbBio );
            SQLBindParameter(hstmt, 29, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, ACCOUNT_USER_INTREST_LEN, 0, user_intrest, 0, &cbUser_intrest );
            SQLBindParameter(hstmt, 30, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &user_mailok, 0, &cbUser_mailok );
            SQLBindParameter(hstmt, 31, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &uid, 0, &cbUid );
            
            strncpy2( (char*)uname, account -> getUname( ), ACCOUNT_UNAME_LEN );
            strncpy2( (char*)name, account -> getName( ), ACCOUNT_NAME_LEN );
            strncpy2( (char*)email, account -> getEmail( ), ACCOUNT_EMAIL_LEN );
            strncpy2( (char*)url, account -> getURL( ), ACCOUNT_URL_LEN );
            strncpy2( (char*)user_avatar, account -> getUserAvatar( ), ACCOUNT_USER_AVATAR_LEN );
            user_regdate = time( NULL );
            strncpy2( (char*)user_icq, account -> getUserIcq( ), ACCOUNT_USER_ICQ_LEN );
            strncpy2( (char*)user_from, account -> getUserFrom( ), ACCOUNT_USER_FROM_LEN );
            strncpy2( (char*)user_sig, account -> getUserSig( ), ACCOUNT_USER_SIG_LEN );
            user_viewemail = account -> getUserViewemail( );
            strncpy2( (char*)actkey, account -> getActkey( ), ACCOUNT_ACTKEY_LEN );
            strncpy2( (char*)user_aim, account -> getUserAim( ), ACCOUNT_USER_AIM_LEN );
            strncpy2( (char*)user_yim, account -> getUserYim( ), ACCOUNT_USER_YIM_LEN );
            strncpy2( (char*)user_msnm, account -> getUserMsnm( ), ACCOUNT_USER_MSNM_LEN );
            strncpy2( (char*)pass, account -> getPass( ), ACCOUNT_PASS_LEN );
            posts = account -> getPosts( );
            attachsig = account -> getAttachsig( );
            rank = account -> getRank( );
            level = account -> getLevel( );
            strncpy2( (char*)theme, account -> getTheme( ), ACCOUNT_THEME_LEN );
            timezone_offset = account -> getTimezoneOffset( );
            last_login = 0;
            strncpy2( (char*)umode, account -> getUmode( ), ACCOUNT_UMODE_LEN );
            uorder = account -> getUorder( );
            notify_method = account -> getNotifyMethod( );
            notify_mode = account -> getNotifyMode( );
            strncpy2( (char*)user_occ, account -> getUserOcc( ), ACCOUNT_USER_OCC_LEN );
            strncpy2( (char*)bio, account -> getBio( ), ACCOUNT_BIO_LEN );
            strncpy2( (char*)user_intrest, account -> getUserIntrest( ), ACCOUNT_USER_INTREST_LEN );
            user_mailok = account -> getUserMailok( );
            uid = account -> getUID( );
            
            if( ( sqlcode = SQLExecute( hstmt ) ) == SQL_SUCCESS ){
                SQLLEN count = 0;
                if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                    ret = RES_OK;
                }else{
                    string s( "SQLRowCount in updateAccount sql=" );
                    s += string( sql );
                    setLastErrorString( s.c_str( ) );
                    ret = RES_DB_QUERY_ERROR;
                }
            }else{
                string s( "SQLExecute in updateAccount 1 " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            setLastErrorString( "SQLPrepare in updateAccount sql=" );
            ret = RES_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
        hstmt = NULL;
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in updateAccount" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = RES_ERROR;
    }
    
    if( ret != RES_OK ){
        return ret;
    }
    
    //xnpaccountのユーザテーブルに残りの情報を上書きする
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        string sql;

        sql = "UPDATE " + dbprefix + "_xnpaccount_users SET ";
        sql += "activate=?, ";
        sql += "address=?, ";
        sql += "division=?, ";
        sql += "tel=?, ";
        sql += "company_name=?, ";
        sql += "country=?, ";
        sql += "zipcode=?, ";
        sql += "fax=?, ";
        sql += "notice_mail=?, ";
        sql += "notice_mail_since=? ,";
        sql += "private_item_number_limit=" + unsignedIntToString( account -> getItemNumberLimit( ) ) + " ,";
        sql += "private_index_number_limit=" + unsignedIntToString( account -> getIndexNumberLimit( ) ) + " ,";
        sql += "private_item_storage_limit=" + doubleToString( account -> getItemStorageLimit( ) ) + " ";
        sql += "WHERE uid=?"; 
    
        sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
        if( sqlcode == SQL_SUCCESS || sqlcode == SQL_SUCCESS_WITH_INFO ){
            SQLBindParameter(hstmt, 1, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &activate, 0, &cbActivate);
            SQLBindParameter(hstmt, 2, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_ADDRESS_LEN, 0, address, 0, &cbAddress); 
            SQLBindParameter(hstmt, 3, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_DIVISION_LEN, 0, division, 0, &cbDivision); 
            SQLBindParameter(hstmt, 4, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_TEL_LEN, 0, tel, 0, &cbTel); 
            SQLBindParameter(hstmt, 5, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_COMPANY_NAME_LEN, 0, company_name, 0, &cbCompany_name); 
            SQLBindParameter(hstmt, 6, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_COUNTRY_LEN, 0, country, 0, &cbCountry); 
            SQLBindParameter(hstmt, 7, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_ZIPCODE_LEN, 0, zipcode, 0, &cbZipcode); 
            SQLBindParameter(hstmt, 8, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_ACCOUNT_FAX_LEN, 0, fax, 0, &cbFax); 
            SQLBindParameter(hstmt, 9, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &notice_mail, 0, &cbNotice_mail);
            SQLBindParameter(hstmt, 10, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &notice_mail_since, 0, &cbNotice_mail_since);
            SQLBindParameter(hstmt, 11, SQL_PARAM_INPUT, SQL_C_SLONG, SQL_INTEGER, 0, 0, &uid, 0, &cbUid );
            
            activate = account -> getActivate() ? 1 : 0;
            strncpy2( (char*)address, account -> getAddress( ) , XNP_ACCOUNT_ADDRESS_LEN );
            strncpy2( (char*)division, account -> getDivision(), XNP_ACCOUNT_DIVISION_LEN );
            strncpy2( (char*)tel, account -> getTel(), XNP_ACCOUNT_TEL_LEN );
            strncpy2( (char*)company_name, account -> getCompanyName(), XNP_ACCOUNT_COMPANY_NAME_LEN );
            strncpy2( (char*)country, account -> getCountry(), XNP_ACCOUNT_COUNTRY_LEN );
            strncpy2( (char*)zipcode, account -> getZipcode(), XNP_ACCOUNT_ZIPCODE_LEN );
            strncpy2( (char*)fax, account -> getFax(), XNP_ACCOUNT_FAX_LEN );
            notice_mail = account -> getNoticeMail( );
            notice_mail_since = account -> getNoticeMailSince( );
            uid = account -> getUID( );
            
            if( ( sqlcode = SQLExecute( hstmt ) ) == SQL_SUCCESS ){
                SQLLEN count = 0;
                if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                    ret = RES_OK;
                }else{
                    string s( "SQLRowCount in updateAccount sql=" );
                    s += string( sql );
                    setLastErrorString( s.c_str( ) );
                    ret = RES_DB_QUERY_ERROR;
                }
            }else{
                string s( "SQLExecute in updateAccount 2 " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            setLastErrorString( "SQLPrepare in updateAccount sql=" );
            ret = RES_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in updateAccount" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = RES_ERROR;
    }
    return ret;
}

/**
 * 
 * criteria_tで指定された範囲のユーザIDを返す.
 * ユーザIDの配列を確保してそこに書き込み，配列のアドレスを*uidsに書き込む.
 * 配列のサイズを*uidsLenに書き込む
 * 
 * @param sid セッションID
 * @param cri 結果の範囲指定，ソート条件指定
 * @param uids ユーザのUIDの配列の出力先
 * @param uidsLen uids配列の要素数の出力先
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t dumpUids( sessionid_t sid, criteria_t* cri, userid_t** uids, int* uidsLen )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    result_t ret = RES_ERROR;
    userid_t* dst = 0;
    string sql;
    SQLRETURN sqlcode;
    SQLLEN count = 0;
            

    sql = "SELECT uid FROM " + dbprefix + "_xnpaccount_users ";
    sql += criteria2str( cri );
    if( countResultRows( sql.c_str(), &count ) == RES_OK ){
        *uidsLen = count;
        dst = new userid_t[ *uidsLen ];
        *uids = dst;
    }else{
        return RES_ERROR;
    }
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            userid_t uid = 0;
            SQLLEN len = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &uid, 0, &len );

            for( int i = 0; ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS && i < *uidsLen ; i++ ){
                dst[ i ] = uid;
            }
            
            syslog_printf( "dumpUids succeed" );
            ret = RES_OK;
        }else{
            string s( "SQLExecDirect in dumpUids " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += "sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            syslog_printf( "dumpUids %s", getLastErrorString( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in dumpUids" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        syslog_printf( "dumpUids %s", getLastErrorString( ) );
        ret = RES_ERROR;
    }
    return ret;
}

/**
 * 
 * グループ数を返す.
 * 不正なセッションIDなら0を返す.
 * 
 * @param sid セッションID
 * @return グループ数
 * 
 */
int getGroupCount( sessionid_t sid )
{
    if( hdbc == NULL ) return 0;
    if( !isValidSessionID( sid ) ) return 0;
    
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    string sql;
    int ret = 0;
    
    //グループ数を求める
    sql = "SELECT COUNT(*) FROM " + dbprefix + "_xnpaccount_groups";
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLUINTEGER count = 0;
            SQLLEN len = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &count, 0, &len );
            if( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                ret = count;
            }else {
                string s( "SQLFetch in getGroupCount sql=" );
                s += string( sql );
                setLastErrorString( s.c_str( ) );
                ret = 0;
            }
        }else{
            setLastErrorString( "SQLExecDirect in getGroupCount" );
            ret = 0;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in getGroupCount" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = 0;
    }
    return ret;
}

/**
 * 
 * 所属グループ一覧取得.
 * ユーザが所属しているグループのIDを取得する
 * 
 * @param sid セッションID
 * @param uid ユーザのUID
 * @param cri 結果の範囲指定，ソート条件指定
 * @param gids グループIDの配列の出力先
 * @param gidsLen gids配列の要素数の出力先
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_USER
 * @return RES_DB_QUERY_ERROR
 * @return RES_OK
 * 
 */
result_t getGroupsByUid( sessionid_t sid, userid_t uid, criteria_t* cri, groupid_t** gids, int* gidsLen )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !uidExists( uid ) ) return RES_NO_SUCH_USER; //uidの存在をチェック
    
    result_t ret = RES_ERROR;
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    SQLLEN count = 0;
    groupid_t* dst = 0;
    
    sql = "SELECT gid FROM " + dbprefix + "_xnpaccount_groups_users_link";
    sql += " WHERE uid=" + string( unsignedIntToString( uid ) );
    sql += criteria2str( cri );
    if( countResultRows( sql.c_str(), &count ) == RES_OK ){
        *gidsLen = count;
        dst = new groupid_t[ *gidsLen ];
        *gids = dst;
    }else{
        return RES_ERROR;
    }
    
    //所属するグループの最大個数を求める
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            if( count > 0 ){
                SQLHANDLE hstmt2 = NULL;    
                if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt2 ) ) == SQL_SUCCESS ) {
                    sql = "SELECT gid, uid, is_admin FROM " + dbprefix + "_xnpaccount_groups_users_link";
                    sql += " WHERE uid=" + string( unsignedIntToString( uid ) );
                    sql += criteria2str( cri );
                    if( ( sqlcode = SQLExecDirect( hstmt2, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
                        SQLLEN len = 0;
                        groupid_t gid = 0;
                        SQLBindCol( hstmt, 1, SQL_C_ULONG, &gid, 0, &len );
                        for( int i = 0; ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS && i < *gidsLen ; i++ ){
                            dst[ i ] = gid;
                        }
                        ret = RES_OK;
                    }else{
                        string s( "SQLExecDirect in getGroupsByUid " );
                        s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                        s += string( ", sql=" ) + string( sql );
                        setLastErrorString( s.c_str( ) );
                        ret = RES_DB_QUERY_ERROR;
                    }
                }else{
                    string s( "SQLAllocHandle in getGroupsByUid " );
                    s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
                    setLastErrorString( s.c_str( ) );
                    ret = RES_ERROR;
                }
            }else{
                ret = RES_OK;
            }
        }else{
            string s( "SQLExecDirect in getGroupsByUid " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += string( ", sql=" ) + string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
    }else{
        string s( "SQLAllocHandle in getGroupsByUid " );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = RES_ERROR;
    }
    return ret;
}

/**
 * 
 * グループ管理権限問合せ.
 * ユーザにループの管理権限があるか(グループ管理者であるか)を問い合わせる.
 * ユーザやグループが存在しないなどの異常の場合，falseを返す.
 * 
 * @param sid セッションID
 * @param gid グループのUID
 * @param uid ユーザのUID
 * @return true 管理権限あり
 * @return false 管理権限なし，または不明
 * 
 */
bool isGroupAdmin( sessionid_t sid, groupid_t gid, userid_t uid )
{
    if( hdbc == NULL ) return false;
    if( !isValidSessionID( sid ) ) return false;
    if( !uidExists( uid ) ) return false;
    if( !gidExists( gid ) ) return false;
    
    bool ret = false;
    string sql;
    SQLLEN count = 0;
    
    sql = "SELECT * FROM " + dbprefix + "_xnpaccount_groups_users_link ";
    sql += "WHERE gid=" + string( unsignedIntToString( gid ) );
    sql += " AND uid=" + string( unsignedIntToString( uid ) );
    sql += " AND is_admin=1";
    if( countResultRows( sql.c_str(), &count ) == RES_OK ){
        if( count > 0 ){
            ret = true;
        }else{
            ret = false;
        }
    }else{
        ret = false;
    }
    return ret;
}

/**
 * 
 * グループID一覧.
 * 登録されているグループのID一覧を取得する.
 * 
 * @param sid セッションID
 * @param cri 結果の範囲指定，ソート条件指定
 * @param gids グループIDの配列の出力先
 * @param gidsLen gids配列の要素数の出力先
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * @return RES_OK
 * 
 */
result_t dumpGids( sessionid_t sid, criteria_t* cri, groupid_t** gids, int* gidsLen )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    result_t ret = RES_ERROR;
    groupid_t* dst = 0;
    string sql;
    SQLRETURN sqlcode;
    SQLLEN count = 0;
            
    sql = "SELECT gid FROM " + dbprefix + "_xnpaccount_groups ";
    sql += criteria2str( cri );
    if( countResultRows( sql.c_str(), &count ) == RES_OK ){
        *gidsLen = count;
        dst = new groupid_t[ *gidsLen ];
        *gids = dst;
    }else{
        return RES_ERROR;
    }
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            groupid_t gid = 0;
            SQLLEN len = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &gid, 0, &len );
            for( int i = 0; ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS && i < *gidsLen ; i++ ){
                dst[ i ] = gid;
            }
            
            ret = RES_OK;
        }else{
            string s( "SQLExecDirect in dumpGids " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += "sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }
    return ret;
}

/**
 * 
 * グループ管理者IDを取得する.
 * あるグループの管理者のユーザIDを取得する.
 * 
 * @param sid セッションID
 * @param gid 問い合わせるグループをIDで指定する
 * @param cri 結果の範囲指定，ソート条件指定
 * @param uids 管理者のUIDの配列を受け取るポインタ
 * @param uidsLen uids配列の要素数
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * @return RES_ERROR 
 * 
 */
result_t dumpGroupAdmins( sessionid_t sid, groupid_t gid, criteria_t* cri, userid_t** uids, int* uidsLen )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    result_t ret = RES_ERROR;
    string sql;
    SQLRETURN sqlcode;
    SQLLEN count = 0;
            
    sql = "SELECT uid FROM " + dbprefix + "_xnpaccount_groups_users_link ";
    sql += " WHERE is_admin=1 and gid=" + unsignedIntToString( gid );
    if( countResultRows( sql.c_str(), &count ) == RES_OK ){
        *uidsLen = count;
        *uids = new groupid_t[ *uidsLen ];
    }else{
        return RES_ERROR;
    }
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            userid_t uid;
            SQLLEN len = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &uid, 0, &len );
            for( int i = 0; ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS && i < *uidsLen ; i++ ){
                (*uids)[ i ] = uid;
            }
            ret = RES_OK;
        }else{
            string s( "SQLExecDirect in dumpGroupAdmins " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += "sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }
    return ret;
}

/**
 * 
 * グループ所属ユーザ削除.
 * グループに所属するユーザを，グループから削除する.
 * デフォルトグループからは削除できない
 * 
 * @param sid セッションID
 * @param gid どのグループから削除するかを指定するグループID
 * @param uid 削除対象のユーザのID
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_USER
 * @return RES_NO_SUCH_GROUP
 * @return RES_DB_QUERY_ERROR
 * @return RES_OK
 * @return RES_ERROR
 * 
 */
result_t deleteMember( sessionid_t sid, groupid_t gid, userid_t uid )
{
    if( gid == group_t::GID_DEFAULT ) return RES_ERROR;
    return deleteMemberNoLimit( sid, gid, uid );
}

/**
 * 
 * グループ所属ユーザ削除.
 * グループに所属するユーザを，グループから削除する.
 * デフォルトグループからも削除できる点が，deleteMemberと異なる
 * 
 * @param sid セッションID
 * @param gid どのグループから削除するかを指定するグループID
 * @param uid 削除対象のユーザのID
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_USER
 * @return RES_NO_SUCH_GROUP
 * @return RES_DB_QUERY_ERROR
 * @return RES_OK
 * @return RES_ERROR
 * 
 */
static result_t deleteMemberNoLimit( sessionid_t sid, groupid_t gid, userid_t uid )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !uidExists( uid ) ) return RES_NO_SUCH_USER; //uidの存在をチェック
    if( !gidExists( gid ) ) return RES_NO_SUCH_GROUP; //gidの存在をチェック
    
    result_t ret = RES_ERROR;
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    
    sql = "DELETE FROM " + dbprefix + "_xnpaccount_groups_users_link ";
    sql += "WHERE gid=" + string( unsignedIntToString( gid ) );
    sql += " AND uid=" + string( unsignedIntToString( uid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLLEN count = 0;
            if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                ret = RES_OK;
            }else{
                string s( "SQLRowCount in deleteMember" );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret = RES_NO_SUCH_USER;
            }
        }else{
            string s( "SQLExecDirect in deleteMember" );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += ", sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in deleteMember" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = RES_ERROR;
    }
    return ret;
}

/**
 * 
 * グループ所属ユーザ追加.
 * グループのメンバーにユーザを追加する.
 * 
 * @param sid セッションID
 * @param gid 所属先グループのID
 * @param uid 所属させるユーザのID
 * @param admin 管理者権限を与えるならtrue
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_USER
 * @return RES_NO_SUCH_GROUP
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t insertMember( sessionid_t sid, groupid_t gid, userid_t uid, bool admin )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !uidExists( uid ) ) return RES_NO_SUCH_USER; //uidの存在をチェック
    if( !gidExists( gid ) ) return RES_NO_SUCH_GROUP; //gidの存在をチェック
    
    result_t ret = RES_ERROR;
    string sql;
    SQLRETURN sqlcode;
    
    //メンバーを追加
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        sql = "INSERT INTO " + dbprefix + "_xnpaccount_groups_users_link ( gid, uid, is_admin ) VALUES (";
        sql += string( unsignedIntToString( gid ) ) + ", ";
        sql += string( unsignedIntToString( uid ) ) + ", ";
        sql += string( admin ? "1" : "0" ) + ") ";
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLLEN count = 0;
            if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                ret = RES_OK;
            }else{
                string s( "SQLRowCount in insertMember " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            string s( "SQLExecDirect in insertMember " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += string( ", sql=" ) + string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in insertMember" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = RES_ERROR;
    }
    return ret;
}

/**
 * 
 * グループ所属ユーザ取得.
 * あるグループの所属しているユーザのユーザIDを取得する
 * 
 * @param sid セッションID
 * @param gid どのグループの所属ユーザを問い合わせるかをグループをIDで指定
 * @param cri 結果の範囲指定，ソート条件指定
 * @param uids 所属ユーザのUIDの配列を受け取るポインタ
 * @param uidsLen uids配列の要素数
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_GROUP
 * @return RES_DB_QUERY_ERROR
 * @return RES_ERROR 
 * 
 */
result_t getMembers( sessionid_t sid, groupid_t gid, criteria_t* cri, userid_t** uids, int* uidsLen )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !gidExists( gid ) ) return RES_NO_SUCH_GROUP; //gidの存在をチェック
    
    result_t ret = RES_ERROR;
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;    
    userid_t* dst = 0;
    
    //how many members ?
    sql = "SELECT COUNT(*) FROM " + dbprefix + "_xnpaccount_groups_users_link ";
    sql += " WHERE gid=" + string( unsignedIntToString( gid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLUINTEGER count = 0;
            SQLLEN len = 0;
            SQLBindCol( hstmt, 1, SQL_C_ULONG, &count, 0, &len );
            if( ( sqlcode = SQLFetch( hstmt ) ) == SQL_SUCCESS ){
                dst = new userid_t[ count ];
                *uids = dst;
                *uidsLen = count;
                if( count > 0 ){
                    //retrieve member's IDs
                    SQLHANDLE hstmt2 = NULL;    
                   if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt2 ) ) == SQL_SUCCESS ) {
                        sql = "SELECT uid, gid, is_admin FROM " + dbprefix + "_xnpaccount_groups_users_link ";
                        sql += " WHERE gid=" + string( unsignedIntToString( gid ) );
                        sql += " " + string( criteria2str( cri ) );
                        if( ( sqlcode = SQLExecDirect( hstmt2, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
                            SQLUINTEGER uid = 0;
                            SQLLEN len = 0;
                            SQLBindCol( hstmt2, 1, SQL_C_ULONG, &uid, 0, &len );
                            for( SQLUINTEGER i = 0; ( sqlcode = SQLFetch( hstmt2 ) ) == SQL_SUCCESS && i < count ; i++ ){
                                dst[ i ] = uid;
                            }
                            ret = RES_OK;
                        }else{
                            setLastErrorString( "SQLExecDirect in getMembers" );
                            ret = RES_DB_QUERY_ERROR;
                        }
                        SQLFreeHandle( SQL_HANDLE_STMT, hstmt2 );
                    }else{
                        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in getMembers" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
                        ret = RES_ERROR;
                    }
                }else{
                    ret = RES_OK;
                }
            }else{
                string s( "SQLFetch in getMembers sql=" );
                s += string( sql );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            setLastErrorString( "SQLExecDirect in getMembers" );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in getMembers" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = RES_ERROR;
    }
    return ret;
}

/**
 * 
 * グループの削除.
 * データベースからグループを削除します.
 * 
 * @param sid セッションID
 * @param gid どのグループの所属ユーザを問い合わせるかをグループをIDで指定
 * @return RES_OK
 * @return RES_DB_QUERY_ERROR
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_NOT_INITIALIZED
 * 
 */
result_t deleteGroup( sessionid_t sid, groupid_t gid )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    result_t ret = RES_ERROR;
    string sql;
    SQLRETURN sqlcode;
    SQLHANDLE hstmt = NULL;
    
    sql = "DELETE FROM " + dbprefix + "_xnpaccount_groups ";
    sql += "WHERE gid = " + string( unsignedIntToString( gid ) );
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        if( ( sqlcode = SQLExecDirect( hstmt, (SQLCHAR*)sql.c_str(), sql.length() ) ) == SQL_SUCCESS ){
            SQLLEN count = 0;
            if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                ret = RES_OK;
            }else{
                string s( "SQLRowCount in deleteGroup" );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                s += string( ", sql=" ) + string( sql );
                setLastErrorString( s.c_str( ) );
                ret = RES_NO_SUCH_USER;
            }
        }else{
            string s( "SQLExecDirect in deleteGroup" );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            s += ", sql=";
            s += string( sql );
            setLastErrorString( s.c_str( ) );
            ret = RES_DB_QUERY_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in deleteGroup" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = RES_ERROR;
    }
    return ret;
}

/**
 * 
 * グループ登録. 
 * グループの情報をデータベースに記録する．
 * 登録したグループに対応するグループIDをgidに格納する．
 * 
 * @param sid セッションID
 * @param group 登録したいグループの情報
 * @param gid 登録したグループに対応するグループID
 * @return RES_OK
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t insertGroup( sessionid_t sid, const group_t* group, groupid_t* gid )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    
    result_t ret = RES_ERROR;
    string sql;
    SQLCHAR gname[XNP_GROUP_GNAME_LEN+1], gdesc[XNP_GROUP_GDESC_LEN+1];
    SQLINTEGER item_number_limit;
    SQLINTEGER index_number_limit;
    SQLDOUBLE item_storage_limit;
    SQLLEN cbGname = SQL_NTS, cbGdesc = SQL_NTS, cbItem_number_limit = 0, cbIndex_number_limit = 0, cbItem_storage_limit = 0;
    SQLRETURN sqlcode;
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        sql = "INSERT INTO " + dbprefix + "_xnpaccount_groups ( gname, gdesc, group_item_number_limit, group_index_number_limit, group_item_storage_limit ) VALUES ( ?, ?, ?, ?, ? )";
        sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
        if( sqlcode == SQL_SUCCESS || sqlcode == SQL_SUCCESS_WITH_INFO ){
            SQLBindParameter(hstmt, 1, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_GROUP_GNAME_LEN, 0, gname, 0, &cbGname );
            SQLBindParameter(hstmt, 2, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_GROUP_GDESC_LEN, 0, gdesc, 0, &cbGdesc );
            SQLBindParameter(hstmt, 3, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &item_number_limit, 0, &cbItem_number_limit);
            SQLBindParameter(hstmt, 4, SQL_PARAM_INPUT, SQL_C_SSHORT, SQL_INTEGER, 0, 0, &index_number_limit, 0, &cbIndex_number_limit);
            SQLBindParameter(hstmt, 5, SQL_PARAM_INPUT, SQL_C_DOUBLE, SQL_DOUBLE, 0, 0, &item_storage_limit, 0, &cbItem_storage_limit);
            strncpy2( (char*)gname, group -> getGname( ), XNP_GROUP_GNAME_LEN );
            strncpy2( (char*)gdesc, group -> getDesc( ), XNP_GROUP_GDESC_LEN );
            item_number_limit = group -> getItemNumberLimit( );
            index_number_limit = group -> getIndexNumberLimit( );
            item_storage_limit = group -> getItemStorageLimit( );
            if( ( sqlcode = SQLExecute( hstmt ) ) == SQL_SUCCESS ){
                SQLLEN count = 0;
                if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                    //グループIDを取得する
                    if( dbtype == DBTYPE_MYSQL ){
                        sql = "SELECT LAST_INSERT_ID()";
                    }else if( dbtype == DBTYPE_SQLITE ){
                        sql = "SELECT LAST_INSERT_ROWID()";
                    }
                    ret = queryGetUnsignedInt( "insertGroup", sql, (unsigned int*)gid );
                }else{
                    string s( "SQLRowCount in insertGroup sql=" );
                    s += string( sql );
                    setLastErrorString( s.c_str( ) );
                    ret = RES_DB_QUERY_ERROR;
                }
            }else{
                string s( "SQLExecute in insertGroup " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            string s( "SQLPrepare in insertGroup " );
            s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
            setLastErrorString( s.c_str( ) );
            ret = RES_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in insertGroup" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = RES_ERROR;
    }
    
    // 
    if ( ret == RES_OK ){
        //group indexを作成
        
        //group index用のsort_num生成
        string sql = "SELECT MAX(sort_number) FROM " + 
          dbprefix + "_xnpaccount_index WHERE parent_index_id=" + unsignedIntToString(item::IID_ROOT) + 
          " AND (open_level=" + unsignedIntToString(index::OL_GROUP_ONLY) +
            " OR open_level=" + unsignedIntToString(index::OL_PUBLIC) + ")";
        unsigned int sortNumber;
        ret = queryGetUnsignedInt( "insertGroup", sql, &sortNumber );
        sortNumber++;
        if ( ret == RES_OK ){
            // group index作成
            index_t index;
            userid_t uid;
            ret = sessionID2UID( sid, &uid );
            if ( ret == RES_OK ){
                index.setItemTypeID(item::ITID_INDEX);
                index.setContributorUID(uid);
                index.setParentIndexID(item::IID_ROOT);
                index.setOwnerGID(*gid);
                index.setOpenLevel(index::OL_GROUP_ONLY);
                index.setSortNumber(sortNumber);
                index.setTitle(group->getGname());
                indexid_t groupXID;
                ret = insertIndexInternal( sid, &index, &groupXID );
                if ( ret == RES_OK ){
                    // xnpaccuont_groupsのgroup_index_idの書き換え
                    sql = "UPDATE " + dbprefix + "_xnpaccount_groups SET group_index_id=" 
                      + unsignedIntToString(groupXID) + " WHERE gid=" + unsignedIntToString(*gid);
                    ret = querySimple( "insertGroup", sql );
                }
            }
        }
    }
    
    return ret;
}

/**
 * 
 * グループ情報を変更する
 * 
 * @param sid セッションID
 * @param group 新しいグループ情報
 * @return RES_OK
 * @return RES_ERROR
 * @return RES_DB_NOT_INITIALIZED
 * @return RES_NO_SUCH_SESSION
 * @return RES_NO_SUCH_GROUP
 * @return RES_DB_QUERY_ERROR
 * 
 */
result_t updateGroup( sessionid_t sid, const group_t* group )
{
    if( hdbc == NULL ) return RES_DB_NOT_INITIALIZED;
    if( group == NULL ) return RES_ERROR;
    if( !isValidSessionID( sid ) ) return RES_NO_SUCH_SESSION;
    if( !gidExists( group -> getGID( ) ) ) return RES_NO_SUCH_GROUP;
    
    result_t ret = RES_ERROR;
    string sql;
    SQLCHAR gname[XNP_GROUP_GNAME_LEN+1], gdesc[XNP_GROUP_GDESC_LEN+1];
    SQLLEN cbGname = SQL_NTS, cbGdesc = SQL_NTS;
    SQLRETURN sqlcode;
    
    if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
        sql = "UPDATE " + dbprefix + "_xnpaccount_groups SET gname=?, gdesc=?, ";
        sql += "group_item_number_limit=" + unsignedIntToString( group -> getItemNumberLimit( ) ) + " ,";
        sql += "group_index_number_limit=" + unsignedIntToString( group -> getIndexNumberLimit( ) ) + " ,";
        sql += "group_item_storage_limit=" + doubleToString( group -> getItemStorageLimit( ) ) + " ";
        sql += "WHERE gid=" + string( unsignedIntToString( group -> getGID( ) ) );
        sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
        if( sqlcode == SQL_SUCCESS || sqlcode == SQL_SUCCESS_WITH_INFO ){
            SQLBindParameter(hstmt, 1, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_GROUP_GNAME_LEN, 0, gname, 0, &cbGname );
            SQLBindParameter(hstmt, 2, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_GROUP_GDESC_LEN, 0, gdesc, 0, &cbGdesc );
            strncpy2( (char*)gname, group -> getGname( ), XNP_GROUP_GNAME_LEN );
            strncpy2( (char*)gdesc, group -> getDesc( ), XNP_GROUP_GDESC_LEN );
            if( ( sqlcode = SQLExecute( hstmt ) ) == SQL_SUCCESS ){
                SQLLEN count = 0;
                if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                    ret = RES_OK;
                }else{
                    string s( "SQLRowCount in updateGroup sql=" );
                    s += string( sql );
                    setLastErrorString( s.c_str( ) );
                    ret = RES_DB_QUERY_ERROR;
                }
            }else{
                string s( "SQLExecute in updateGroup " );
                s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                setLastErrorString( s.c_str( ) );
                ret = RES_DB_QUERY_ERROR;
            }
        }else{
            setLastErrorString( "SQLPrepare in updateGroup sql=" );
            ret = RES_ERROR;
        }
        SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
    }else{
        string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in updateGroup" );
        s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
        setLastErrorString( s.c_str( ) );
        ret = RES_ERROR;
    }
    
    if( ret == RES_OK ){
        // updateすべきindex_idを得る
        sql = "SELECT group_index_id from " + dbprefix + "_xnpaccount_groups as tg "
          " left join " + dbprefix + "_xnpaccount_item_basic as ti on tg.group_index_id = ti.item_id "
          " left join " + dbprefix + "_xnpaccount_index as tx on ti.item_id = tx.index_id "
          " where tg.gid=" +  unsignedIntToString(group->getGID()) + 
          "  and ti.item_type_id=" + unsignedIntToString(item::ITID_INDEX) +
          "  and tx.parent_index_id=" + unsignedIntToString(item::IID_ROOT);
        indexid_t xid;
        ret = queryGetUnsignedInt( "updateGroup",  sql, &xid );
        
        if ( ret == RES_OK ){
            if( ( sqlcode = SQLAllocHandle( SQL_HANDLE_STMT, hdbc, &hstmt ) ) == SQL_SUCCESS ) {
                sql = "UPDATE " + dbprefix + "_xnpaccount_item_basic set title=? "
                    "WHERE item_id=" + unsignedIntToString(xid);
                sqlcode = SQLPrepare(hstmt, (SQLCHAR*)sql.c_str(), SQL_NTS);
                if( sqlcode == SQL_SUCCESS || sqlcode == SQL_SUCCESS_WITH_INFO ){
                    cbGname = SQL_NTS;
                    SQLBindParameter(hstmt, 1, SQL_PARAM_INPUT, SQL_C_CHAR, SQL_LONGVARCHAR, XNP_GROUP_GNAME_LEN, 0, gname, 0, &cbGname );
                    strncpy2( (char*)gname, group -> getGname( ), XNP_GROUP_GNAME_LEN );
                    if( ( sqlcode = SQLExecute( hstmt ) ) == SQL_SUCCESS ){
                        SQLLEN count = 0;
                        if( ( sqlcode = SQLRowCount( hstmt, &count ) ) == SQL_SUCCESS && count > 0 ){
                            ret = RES_OK;
                        }else{
                            string s( "SQLRowCount in updateGroup sql=" );
                            s += string( sql );
                            setLastErrorString( s.c_str( ) );
                            ret = RES_DB_QUERY_ERROR;
                        }
                    }else{
                        string s( "SQLExecute in updateGroup " );
                        s += odbcDiagString( SQL_HANDLE_STMT, hstmt, sqlcode );
                        setLastErrorString( s.c_str( ) );
                        ret = RES_DB_QUERY_ERROR;
                    }
                }else{
                    setLastErrorString( "SQLPrepare in updateGroup sql=" );
                    ret = RES_ERROR;
                }
                SQLFreeHandle( SQL_HANDLE_STMT, hstmt );
            }else{
                string s( "SQLAllocHandle(SQL_HANDLE_STMT,...) in updateGroup" );
                s += odbcDiagString( SQL_HANDLE_DBC, hdbc, sqlcode );
                setLastErrorString( s.c_str( ) );
                ret = RES_ERROR;
            }
        }
    }
    return RES_OK;
}

/**
 * 