What are alternative methods, such as using links with GET parameters, for deleting database rows in PHP?

When deleting database rows in PHP, it is common practice to use a form with a POST request to ensure security and prevent accidental deletion. However, an alternative method is to use links with GET parameters to delete rows. This method is less secure as it exposes the action directly in the URL, making it vulnerable to CSRF attacks. It is important to implement proper validation and security measures when using this method. 

<?php
// Check if the delete parameter is set in the URL
if(isset($_GET['delete'])){
    $id = $_GET['delete'];
    
    // Validate the ID parameter to prevent SQL injection
    $id = filter_var($id, FILTER_SANITIZE_NUMBER_INT);
    
    // Perform the deletion query
    $query = "DELETE FROM table_name WHERE id = $id";
    
    // Execute the query
    // Add your database connection code here
    
    // Redirect to a success page or back to the original page
    header('Location: success.php');
    exit;
}
?>

Keywords

GET parameters links database rows deletion PHP

Related Questions