<![CDATA[Code The World — Delete data from a MySQL database]]> https://codetheworld.com/viewtopic.php?id=8 Sat, 02 Jan 2010 13:25:33 +0000 PunBB <![CDATA[Re: Delete data from a MySQL database]]> https://codetheworld.com/viewtopic.php?pid=373#p373 This would, if register_globals was set in the php.ini. It the server was using PHP5 it is unlikely however I do think that in the earlier versions of PHP4 it was turned on, an attacker could simply make the request...

http://example.com/path/to/file.php?id=1

and it would delete the table with an id of 1, this is easily scriptable so that it would go through and increment the id number until all the id's were completed

]]> Sat, 02 Jan 2010 13:25:33 +0000 https://codetheworld.com/viewtopic.php?pid=373#p373 <![CDATA[Re: Delete data from a MySQL database]]> https://codetheworld.com/viewtopic.php?pid=17#p17 Does this pose a potential security risk?

]]> Sun, 15 Jun 2008 02:29:27 +0000 https://codetheworld.com/viewtopic.php?pid=17#p17 <![CDATA[Delete data from a MySQL database]]> https://codetheworld.com/viewtopic.php?pid=8#p8 Description
How to remove and erase stored information from a MySQL database table.

The code

<?php

/*
 * Change the first line to whatever
 * you use to connect to the database.
 *
 * Change tablename to the name of your 
 * database table.
 *
 * This example would delete a row from
 * a table based on the id of the row.
 * You can change this to whatever you
 * want.
 */

// Your database connection code
db_connect();

$query = "DELETE FROM tablename WHERE id = ('$id')";

$result = mysql_query($query);

echo "The data has been deleted.";

?>
]]> Sun, 15 Jun 2008 01:05:54 +0000 https://codetheworld.com/viewtopic.php?pid=8#p8