How can PHP developers ensure proper error handling and validation when deleting data from a database using user input?

When deleting data from a database using user input, PHP developers should always validate the input to prevent SQL injection attacks and ensure that only authorized users can delete data. Error handling should also be implemented to catch any potential issues during the deletion process, such as database connection errors or incorrect input. Using prepared statements with parameterized queries can help prevent SQL injection attacks, while implementing try-catch blocks can help handle any errors that may occur during the deletion process. 

// Assuming $conn is the database connection

// Validate user input
if(isset($_POST['id']) && is_numeric($_POST['id'])) {
    $id = $_POST['id'];
    
    // Prepare the delete statement
    $stmt = $conn->prepare("DELETE FROM table_name WHERE id = ?");
    $stmt->bind_param("i", $id);
    
    // Execute the statement
    try {
        $stmt->execute();
        echo "Data deleted successfully";
    } catch(Exception $e) {
        echo "Error deleting data: " . $e->getMessage();
    }
} else {
    echo "Invalid input";
}

Keywords

SQL injection PDO try-catch prepared statements data sanitization

Related Questions