Delete MySQL entry from HTML page

Question

I'm trying to design a control page for my website that allows admins to delete requests to use a 3D printer at my school. The page displays a query of the schedule from the MySQL database and puts a delete button next to every entry. However, I would like to link the information in each entry to its respective delete button and have no idea how to do that. You can see the page itself here: http://kepler.covenant.edu/~techclub/PHP/manage%20printer%20schedule.php and this is my code for displaying the information

if ($result = $mysqli->query($query)) {
    // see if any rows were returned
    if ($result->num_rows > 0) {
        // yes
        // print them one after another
        echo "<table cellpadding=10 border=1>";
        echo "<tr>";
        echo "<th>Control</th>";
        echo "<th>Student ID</th>";
        echo "<th>Last Name</th>";
        echo "<th>First Name</th>";
        echo "<th>Date and Time</th>";
        echo "<th>Description</th>";
        echo "</tr>";
        $key = 1;
        while($row = $result->fetch_array()) {
            echo '<form method="POST" name="deleterequest" action = "delete request.php">';
            echo "<tr>";
            echo "<td><input name='".$row[5]."'type='submit' value='Delete' ></td>";
            echo "<td>".$row[0]."</td>";
            echo "<td>".$row[1]."</td>";
            echo "<td>".$row[2]."</td>";
            echo "<td>".$row[3]."</td>";
            echo "<td>".$row[4]."</td>";
            echo "</tr>";
            echo "</form>";
        }
        echo "</table>";
    }
    else {
        // no
        // print status message
        echo "No upcoming prints found!";
    }

    // free result set memory
    $result->close();
}

I can't figure out how to link the information in a row with the delete button that I put in the row to send to the delete request.php program (which I have no code for yet)

If you're up to using checkboxes, I refer people to this Q&A on SO, which is what I used; it worked for me. Plus, you can change the checkbox to radio; which is what I did. — Funk Forty Niner
– Funk Forty Niner, Commented Mar 20, 2014 at 16:18

Mohammad Ahmad · Accepted Answer · 2014-03-20 16:20:28Z

3

you should put hidden field that hold each record id.

As below

while($row = $result->fetch_array()) {
            echo "<tr>";
            echo "<td>";
            echo '<form method="POST" name="deleterequest" action = "delete request.php">';
            echo "<input name='recored_id' type='hidden' value='".$row['id']."' >";
            echo "<input name='delete'type='submit' value='Delete' >";
            echo "</form>";
            echo "</td>";
            echo "<td>".$row[0]."</td>";
            echo "<td>".$row[1]."</td>";
            echo "<td>".$row[2]."</td>";
            echo "<td>".$row[3]."</td>";
            echo "<td>".$row[4]."</td>";
            echo "</tr>";
            echo "</form>";
        }

Now from your request.php page you should do something like this

$recored_id = (int) $_POST['recored_id'];
$sql = "DELETE FROM table_name WHERE recored_id='$recored_id'";

Don't forget to give this code some security validation

all the best,

edited Mar 20, 2014 at 16:20

answered Mar 20, 2014 at 16:10

Mohammad Ahmad

7452 gold badges9 silver badges23 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

Funk Forty Niner Over a year ago

This method is open to SQL injection.

Mohammad Ahmad Over a year ago

@Fred-ii- yes i know, i mention to do some security stuff :) however i will update it

Funk Forty Niner Over a year ago

Actually, that can also be written as $recored_id = mysqli_real_escape_string($con,$_POST['recored_id']);

Mohammad Ahmad Over a year ago

@Fred-ii- you are right, but we expect to have integer value in $_POST['recored_id']. so if it's not the query will fill, and this is what we want. however all ways lead to Rome

Funk Forty Niner Over a year ago

^--« Translated "Rome is a beautiful city!" ;-) - Glad to see the OP accepted your answer. +1 ;-)

|

echolocation · Accepted Answer · 2014-03-20 16:07:16Z

You're going to need some hidden inputs, like so:

while($row = $result->fetch_array()) {

    echo "<tr>";
    echo '<td><form method="POST" name="deleterequest" action = "deleterequest.php">';
    echo "<input type='hidden' name='val0' value='" . $row[0] . "'>";
    echo "<input type='hidden' name='val1' value='" . $row[1] . "'>";
    echo "<input type='hidden' name='val2' value='" . $row[2] . "'>";
    echo "<input type='hidden' name='val3' value='" . $row[3] . "'>";
    echo "<input type='hidden' name='val4' value='" . $row[4] . "'>";
    echo "<input name='".$row[5]."'type='submit' value='Delete' >";
    echo "</form></td>";
    echo "<td>".$row[0]."</td>";
    echo "<td>".$row[1]."</td>";
    echo "<td>".$row[2]."</td>";
    echo "<td>".$row[3]."</td>";
    echo "<td>".$row[4]."</td>";
    echo "</tr>";
}

You should change the name of these inputs though

Collectives™ on Stack Overflow

Delete MySQL entry from HTML page

2 Answers 2

7 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

7 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related