PHP使用ID删除记录

Question

给出ID时，该程序旨在删除一条记录。

的PHP：

if ($_GET['type']=="file"){

    $servername = "localhost";
    $username = "****";
    $password = "****";
    $dbname = "****";

    // Create connection
    $conn = mysqli_connect($servername, $username, $password, $dbname);
    // Check connection
    if (mysqli_connect_error($conn)) {
        die("Connection failed: " . mysqli_connect_error($conn));
    }
    $sql = "SELECT id,user, FROM CreationsAndFiles WHERE id =".$_GET['id']." LIMIT 1";
    $result = mysqli_query($conn,$sql);
    $row = mysqli_fetch_assoc($result);
    if ($row['user'] == $login_session){
        $sql = "DELETE FROM CreationsAndFiles WHERE id=".$_GET['id'];
        if(mysqli_query($conn, $sql)){echo "deleted";}
    }
    mysqli_close($conn);
    //header("location: index.php?page=CreationsAndFiles");
}

标头是type=file&id=9 ，其中有一条记录，其中id=9它没有明显的原因是行不通的。

Answer 1

您的SQL语法错误；

SELECT id,user, FROM CreationsAndFiles...
              ^ extra comma

应该简单

SELECT id,user FROM CreationsAndFiles...

不过，您可能希望清理输入内容，例如，简单地输入type=file&id=id很有可能会做坏事。