[RESOLVED] Javascrpt PopUp to conifrm Delete Contact

[juniper747]

I currently have a friends.php page, which outputs a list of a logged-in members friends. Next to each friends is a link to delete a friend:

<a href="wipecontact.php?f_id=' . $fid . '&m_id=' . $logOptions_id . '">Delete Friend</a>

The wipecontact.php is just pure code that deletes the relationship from a MySQL table and looks like this:

include_once "scripts/connect_to_mysql.php";

if (($_GET['f_id']) && ($_GET['m_id'])) {
        $f_id = $_GET['f_id'];
	$m_id = $_GET['m_id'];
	$del_friend = 'mysql_query("DELETE FROM friends WHERE (($f_id IN (requesting_id, requested_id)) AND ($m_id IN (requesting_id, requested_id)))") or die (mysql_error())';
} else {
	echo"something went wrong with deleting your friend :(";
	exit();	
}
?>

Everything works fine, but how can I add a javascript (or jquery etc.) pop-up that lets the user confirm the deletion before proceeding to the MySQL delete query. I am just looking for something simple, without having to alter my code too much.

Note that I need the pop-up to come up before running the mysql query! I'm having trouble getting around this. I'm sort of new to javascript, but I can read it when its all put together. Thanks.

[johanafm]

<a href="javascript:void(0);" onclick="if (confirm('Really delete')) window.location='...';">Delete</a>

[bradgrafelman]

As an alternative, I like to do such links like so:

<a href="delete_page.php?nojs=1&id=123" onclick="return confirmDelete('123')">Delete</a>

with the JS function being defined like so:

<script type="text/javascript">
function confirmDelete(id)
{
	if(confirm('Are you SURE you want to delete this thingy?'))
		window.location = 'delete_page.php?id=123';

return false;
}
</script>

This has a couple of advantages:

1. You avoid using the 'javascript:' pseudo-protocol in the 'href' attribute. I personally try to do this because otherwise you probably should've used a <button> or something similar instead of an anchor.

   Plus, if someone wanted to open the link in a new tab (for whatever reason) and tried to middle-click on the link, either the JS wouldn't fire properly or the code would execute in the current tab, effectively ignoring the user's middle-click vs. left-click.

2. You don't alienate those who don't have Javascript enabled. In the above example, the 'delete_script.php' file could check for the presence of the 'nojs' parameter in the query string and display a separate confirmation page.

All of this, of course, ignores the best practice of avoiding GET requests that modify the system state in some way (such as by deleting something). Otherwise, some crawler or pre-fetcher mechanism (or even an accidental page refresh) could cause unintended consequences.

[juniper747]

Thanks