How to let the user delete a profile using php? - php

Question

I currently have a website where the user can add profiles of people they know on a contacts page. I'm now trying to also let them delete specific profiles but I can't get it to work. Here's what I have so far.
Version 2.0 after feedback (now working):
<form action = "<?php echo $_SERVER['PHP_SELF']; ?>" method = "POST">
profile = <input type = "text" name = "profile" required />
<input type = "submit" />
</form>
<?php
$servername = "localhost";
$username = "root";
$password = "root";
$dbname = "registration";
$conn = new mysqli($servername, $username, $password, $dbname);
if ($conn->connect_error) {
die("Connection failed: " . $conn->connect_error);
}
$prepped = $conn->prepare ('DELETE FROM users WHERE id = ?');
$prepped->bind_param ('i', $_POST["profile"]);
if ($prepped->execute()) {
// success
} else {
// failure
}
var_dump($_POST);
?>

Answer 1

The query you're executing is literally looking for an id "profile" in the database. Presumably the ID column is numeric so it can't possibly contain any rows with an id of "profile".
You need to pass the ID you want to delete in as a parameter to your query
$prepped = $conn->prepare ('DELETE FROM uses WHERE id = ?'); // The "?" is a placeholder that MySQL will replace with the specified parameter
$prepped->bind_param ('i', $_POST["profile"]); // 'i' indicates we're expecting an integer. See PHP docs for other options
if ($prepped->execute()) {
// The query executed without any errors (though you should also check how many rows were affected at this point to determine if anything was actually deleted)
} else {
// Failure
}
Additionally your form markup is incorrect and therefore probably not posting to the correct location.
<form action = "<?php echo $_SERVER['PHP_SELF']; ?>" method = "POST">
Profile = <input type = "text" name = "profile" required />
<input type = "submit" />
</form>

Answer 2

Your query should look more like:
$query = sprintf("DELETE FROM uses WHERE id = '%s'", $profile);
or without sprintf():
$query = "DELETE FROM uses WHERE id = '" . $profile . "'";
EDIT after comments
$profile is a variable holding the string with the name / id / whatever you use to profile the user. From your form, you should define it in this way:
$profile = $conn->real_escape_string($_POST["profile"]);
of course before the query.

Answer 3

form action should be <?php echo $_SERVER['PHP_SELF']; ?>
see your code also.. what you are doing is passing the unknown $sql variable in if statement if ($conn->query($sql) === TRUE)
you have to pass $query variable defined above in this statement
Kindly replace your code with this code.. hope it will work for you :) goodluck
<form action = "<?php echo $_SERVER['PHP_SELF']; ?>" method = "POST">
Profile = <input type = "text" name = "profile" required />
<input type = "submit" />
</form>
<?php
$servername = "localhost";
$username = "root";
$password = "root";
$dbname = "registration";
$conn = new mysqli($servername, $username, $password, $dbname);
if ($conn->connect_error) {
die("Connection failed: " . $conn->connect_error);
}
///////////NEW CODE///////////
$profile_id = mysql_real_escape_string($_POST['profile']);
$query = "DELETE FROM users WHERE id= '".$profile_id."'";
if ($conn->query($query) === TRUE) {
echo "Profile deleted successfully";
} else {
echo "Error deleting profile: " . $conn->error;
}
//////////////////////////////
?>