remove row simple userid and pasword

[jonki]

Hi - I am trying to use the code below to remove a row from my database.

All I want is a simple form which the user passes across the user id and pasword and his entry will be removed.

I have a column in the database called userid and one called code.

The php passes across "userid" and "codecom".

    $query = "SELECT * FROM tenerpiso_alquiler WHERE userid = '$userid'"; 
    //Retrieve data from database. 

$result = mysql_query($query); // run the query 
$data = mysql_fetch_array($result); // get results into $data 

$query = "DELETE FROM tenerpiso_alquiler WHERE userid = '$userid' AND code = '$codecom'"; 
// Delete the image info from the database 
$result = mysql_query($query); //run the query 

unlink("fotos_pisos_alquiler/" . $data[fotos]); 
// delete the file

 

This all seems to work fine however it deletes the row whether I put in the correct code or not - which ofcourse defeats the object of the code. What am I doing wrong?

(Also - although it deletes the row it doesn't delete the file because for some reason I am refused permision even though I thought I had all the permisions to this these files - any suggetsions?)

Thanks a lot.

[jonki]

If any of you are interested - this code works. It is by no means fool proof and I think the more experienced programmers would dispare if they saw that I was using this but here goes;

 $query = "SELECT * FROM tenerpiso_alquiler WHERE userid = '$userid' AND code = '$codecom'"; 
    //Retrieve data from database. 

 $result = mysql_query($query); // run the query 

if (mysql_num_rows($result) != 0)
	{

	$data = mysql_fetch_array($result); // get results into $data 

 	$query = "DELETE FROM tenerpiso_alquiler WHERE userid = '$userid' AND code = '$codecom'"; 
	// Delete the image info from the database 
	$result = mysql_query($query); //run the query 

	print "<p><b> Su propiedad ha sido borrada </b></p>\n";

	unlink("fotos_pisos_alquiler/" . $data[fotos]); 
	// delete the file
	}

else	{ print "<p><b> Lo siento su codico es incorecto </b></p>\n"; }

Now - I have a small question:

If I display the results of a search out in a table with a while loop - how do I pass a variable acrossto another php page? I do this with variables used for the search but I don't know how to do this for variables taken from the database.

I want for people who have sold their property to be able to delete it so they can find thier property doing a normal search and next to each one there is a "delete" button which is basically alink to the code shown above. However I would prefer it if they didn't have to remember their user id so is there any way of passing this across?

while ($row = mysql_fetch_assoc ($result))

echo "<div><a href=delete.php?userid2=$userid'>DELETE ENTRY</a>

Something like this but using variables from the database.

Thanks a lot.