restrict user editing of mysql records

[chefmars]

I have a jobs posting page that is an adaptation of a guestbook script.
After a day and a half I am still unable to figure out how I can allow the user who posted their listing to select only their posting and either delete or edit it. I have been able to present the complete mysql database for editing or deleting, but that means no security for all the other users.

Login Page: <a href="http://www.marscafe.com/php/query/manage.php">manage.php</a>
<a href="http://www.marscafe.com/php/query/manage.html">manage code</a>

<a href="http://http://www.marscafe.com/php/query/manageedit.html">manageedit code</a>

I would greatly appreciate help from more experienced and knowledgeable users.

Culinarily Yours,
Chef Mars

[mrmufin]

"...I am still unable to figure out how I can allow the user who posted their listing to select only their posting and either delete or edit it..."

Each user must be associated with their own data, in some fashion. Best bet is to:

a) use some form of session management, either native PHP sessions, or better, yet, roll yer own session manager so you can easily make it do everything that you need it to do;

b) make users register (initially) and log in afterwards. Once a user is logged in, update the session with the unique user ID;

c) all data needs to be associated with each users unique ID. Since you make users log in, you can just check their session data and pull only their data out of the database for editing or deleting;

d) make an administrative account for yourself which allows you (or the site administrator) to do such things as delete bogus postings, etc;

Without seeing the exact code that you're trying to reverse-engineer, it's tough to provide more specific details; thus my 'generalized' advice...

Have fun...