1 Topic by Casper

  • Casper
  • Member
  • Offline
  • Registered: 2007-11-19
  • Posts: 12

Topic: Delete data from a MySQL database

Description
How to remove and erase stored information from a MySQL database table.

The code

<?php

/*
 * Change the first line to whatever
 * you use to connect to the database.
 *
 * Change tablename to the name of your 
 * database table.
 *
 * This example would delete a row from
 * a table based on the id of the row.
 * You can change this to whatever you
 * want.
 */

// Your database connection code
db_connect();

$query = "DELETE FROM tablename WHERE id = ('$id')";

$result = mysql_query($query);

echo "The data has been deleted.";

?>

2 Reply by hotaussie

  • hotaussie
  • New member
  • Offline
  • Registered: 2008-06-15
  • Posts: 5

Re: Delete data from a MySQL database

Does this pose a potential security risk?

3 Reply by Alias

  • Alias
  • New member
  • Offline
  • Registered: 2010-01-02
  • Posts: 1

Re: Delete data from a MySQL database

This would, if register_globals was set in the php.ini. It the server was using PHP5 it is unlikely however I do think that in the earlier versions of PHP4 it was turned on, an attacker could simply make the request...

http://example.com/path/to/file.php?id=1

and it would delete the table with an id of 1, this is easily scriptable so that it would go through and increment the id number until all the id's were completed