// should rather use 'get' method
__SQL_GET_STRING(filename,"SELECT filename FROM co_%s_attachment WHERE id=%d",
par_area, par_id)
__SEND_MESG_DEBUG("obtained filename %s", filename)
__RETURN_STRING(ap_psprintf( p, "%s/attachment/%d/%s", par_area, par_id, filename))