Delete Values from a database using jquery

Question

I have remove which is given as a link. If I click remove I want to remove a value from the database, but certainly its not working... what's wrong?

<td align="center">
<div id="remove">
<a href='#' onclick="removeDesign()">remove</a>
</div>
</td>

function removeDesign()
{
var confirmation = confirm("Are You Sure You Want to Delete This Item?")
if(confirmation == true)
{
  $.post('remove.php',{designId : [<?=$_SESSION['designid']?>]});
}
}

remove.php:

<?php

include("config/dbconn.php");
$DesignId=$_POST['designId'];
$sql = "delete from design where id = '".$DesignId."'";
mysql_query($sql);
?>

The problem is the designid value is not passing to the remove.php? Can any one show the solution?

Right now, it's a good thing that this doesn't work, because it's an enormous SQL injection hole. Imagine if someone submitted ' OR '' = ' as designId -- all the records in your database would be gone. Sanitise the data, and look into using prepared statements. — lonesomeday
– lonesomeday, Commented Jun 21, 2011 at 11:07

hakre · Accepted Answer · 2011-06-21 11:20:59Z

1

Try

$.post("remove.php",{designId : "'" +  <?php echo $_SESSION['designid']?> + "'"} );

edited Jun 21, 2011 at 11:20

hakre

200k55 gold badges454 silver badges865 bronze badges

answered Jun 21, 2011 at 11:06

Pranay Rana

177k37 gold badges244 silver badges266 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Shakti Singh Over a year ago

and make sure php sort tag is enabled

Collectives™ on Stack Overflow

Delete Values from a database using jquery

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related