Putting A Delete Hyperlink On A Table

[Arsenal_Rule]

I was wondering if you anyone could help me again with something!!

I've finished my table view page, and its all working nicely!

But, I would like to have a delete (hyperlink??) function at the end of each row to remove a user and all his data and information stored in the database etc..

this is what my testview.php script currently looks like:

<?php 


	$conn = mysql_connect("localhost","root","") or die("Could Not Connect To The Database"); 
	mysql_select_db("aziz",$conn) or die("Could Not Select The Database"); 



$result=mysql_query("SELECT user_id,az_firstname,az_surname,username FROM azizpassword ORDER BY user_id;");

$i=0;
while( $row=mysql_fetch_array($result) )
{
	if($i>0)
	{
		echo "<tr valign=top>";
		echo "<td bgcolor=#93B0B4 colspan=4><img src=img/blank.gif wuser_idth=1 height=1></td>";
		echo "</tr>";
	}
	echo "<tr valign=center>";
	echo "<td width=100 class=table><b>".$row['user_id']."</b></td>";
	echo "<td width=100 class=table><a href=\"view.php?id=".$row['user_id']."\">".$row['az_surname']."</a></td>";
	echo "<td width=100 class=table>".$row['az_firstname']." </td>";
	echo "<td width=100 class=table><i>".$row['username']."</i> </td>";

	echo "<td class=table></td>";
	echo "</tr>";
	$i++;

}

echo "<tr valign=bottom>";
    echo "<td bgcolor=#93B0B4 colspan=6 height=8></td>";
    echo "</tr>";





?>

its got the table data there, and this all works fine, but, i would like to install a delete function hyperlink at the end of each row that will delete all the information of that chosen user from the database, ive tried a few methods but they just dont work.

Any idea's anyone would so great??

thanks a lot in advance I really appreciate it!!

[liquorvicar]

why don't you just add

echo('<a href="delete.php?id='.intval($row['user_id']).'">delete</a>');

to the end of your row and then have a script called delete.php that deletes that row in the DB and redirects to your table listing?

[MarkR]

It is a very bad idea to add "delete" (or update, change, or any other modification action) as a hyperlink.

This is because hyperlinks are not always fetched as a direct result of a user action. Sometimes browsers (or browser add-ons, extensions, plugins, proxy servers etc) pre-fetch the contents of links in case the user clicks on them.

Also, other types of spider (besides prefetchers) can follow these links and wreak havoc.

I strongly recommend that you consider putting a button that posts a form (with method=post) in instead. That is definitely won't be hit by prefetchers, spiders, or done without the user's explicit permission.

Mark

[liquorvicar]

good catch MarkR.

whereabouts in Oxford are you??

[Arsenal_Rule]

Hey guys thanx for the quick reply I ill try the things you suggested the thing about putting the delete button as hyperlink is that its not going to be online its going to be used a like a stand alone intranet so I dunno it will will be affected by pop ups or prefetchers if that is ment by prefetchers not sure really. But I will try its just I'm a begginner with PHP so can you explain further your sugestion of

I strongly recommend that you consider putting a button that posts a form (with method=post) in instead. That is definitely won't be hit by prefetchers, spiders, or done without the user's explicit permission

That would be great thank you very much its just to allow me to get a further and more efficient understanding to allow me to solve this problem

Thank you again

Take Care

[liquorvicar]

what he means is use code like this:

echo('<form action="delete.php" method="POST">
  <input type="hidden" name="id" value="'.intval($row['user_id']).'">
  <input type="submit" value="delete"></form>');

rather than my

echo('<a href="delete.php?id='.intval($row['user_id']).'">delete</a>');