This is a discussion on How to delete a file in my web server via php within the PHP Language forums, part of the PHP Programming Forums category; Hi to all, that's my question I have mysql database and a web page to upload files to my ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hi to all, that's my question I have mysql database and a web page to
upload files to my webpage, I know how to delete them from the database, but didnt find the code to delete them from the web server. Please help me with this code. Regards Marcelo Fabiani |
|
|||
|
marce1972 wrote:
> Hi to all, that's my question I have mysql database and a web page to > upload files to my webpage, I know how to delete them from the > database, but didnt find the code to delete them from the web server. > Please help me with this code. > The only way to do this through HTTP is to create a remote script that accepts parameters and uses these to select and delete the file. There's also a HTTP DELETE method, but I have never encountered a server which supports it. JW |
|
|||
|
Janwillem Borleffs schreef:
> marce1972 wrote: >> Hi to all, that's my question I have mysql database and a web page to >> upload files to my webpage, I know how to delete them from the >> database, but didnt find the code to delete them from the web server. >> Please help me with this code. >> > > The only way to do this through HTTP is to create a remote script that > accepts parameters and uses these to select and delete the file. There's > also a HTTP DELETE method, but I have never encountered a server which > supports it. > > > JW shortest way : @unlink($file); Make sure to check the input first -- Arjen http://www.hondenpage.com |
|
|||
|
Janwillem Borleffs wrote:
> The only way to do this through HTTP is to create a remote script that > accepts parameters and uses these to select and delete the file. There's > also a HTTP DELETE method, but I have never encountered a server which > supports it. Apache does, though you need to do a lot of setup to get it to work. WebDAV is a bit easier to set up, and better supported at the client end. -- Toby A Inkster BSc (Hons) ARCS Contact Me ~ http://tobyinkster.co.uk/contact |
|
|||
|
Floortje wrote: > Janwillem Borleffs schreef: > > marce1972 wrote: > >> Hi to all, that's my question I have mysql database and a web page to > >> upload files to my webpage, I know how to delete them from the > >> database, but didnt find the code to delete them from the web server. > >> Please help me with this code. > >> > > > > The only way to do this through HTTP is to create a remote script that > > accepts parameters and uses these to select and delete the file. There's > > also a HTTP DELETE method, but I have never encountered a server which > > supports it. > > > > > > JW > > shortest way : > @unlink($file); > > Make sure to check the input first > > -- > Arjen > http://www.hondenpage.com Do I rite this on my php code as you wrote it? $nom=$_POST['numero']; $sql="DELETE FROM canciones WHERE idcancion='$nom';"; mysql_query($sql) or die ("problema con borrado"); $arch=$_POST['ref']; @unlink($arch); Is this correct Thanks I'll download the other option webdav too to see if it works regards Marcelo |
|
|||
|
marce1972 wrote:
> Do I rite this on my php code as you wrote it? > > $nom=$_POST['numero']; > $sql="DELETE FROM canciones WHERE idcancion='$nom';"; > mysql_query($sql) or die ("problema con borrado"); > $arch=$_POST['ref']; > @unlink($arch); > > Is this correct > Thanks I'll download the other option webdav too to see if it works No, as Arjen already pointed out: check the input. This means you should check the value of $_POST['ref'], because if you don't the user will be able to delete any file the webserver has writing rights to. Ruben. |
|
|||
|
Ruben van Engelenburg schreef:
> marce1972 wrote: > >> Do I rite this on my php code as you wrote it? >> >> $nom=$_POST['numero']; >> $sql="DELETE FROM canciones WHERE idcancion='$nom';"; >> mysql_query($sql) or die ("problema con borrado"); >> $arch=$_POST['ref']; >> @unlink($arch); >> >> Is this correct >> Thanks I'll download the other option webdav too to see if it works > > No, as Arjen already pointed out: check the input. This means you should > check the value of $_POST['ref'], because if you don't the user will be > able to delete any file the webserver has writing rights to. One way to do it: check if page is listed in the db $sql = "SELECT id,page FROM $table WHERE id = '".intval($_POST['id'])."'"; if that query gives one result then execute your code -- Arjen http://www.hondenpage.com |
|
|||
|
Floortje schreef:
> Ruben van Engelenburg schreef: >> marce1972 wrote: >> >>> Do I rite this on my php code as you wrote it? >>> >>> $nom=$_POST['numero']; >>> $sql="DELETE FROM canciones WHERE idcancion='$nom';"; >>> mysql_query($sql) or die ("problema con borrado"); >>> $arch=$_POST['ref']; >>> @unlink($arch); >>> >>> Is this correct >>> Thanks I'll download the other option webdav too to see if it works >> >> No, as Arjen already pointed out: check the input. This means you >> should check the value of $_POST['ref'], because if you don't the user >> will be able to delete any file the webserver has writing rights to. > > One way to do it: > check if page is listed in the db > $sql = "SELECT id,page FROM $table WHERE id = '".intval($_POST['id'])."'"; > > if that query gives one result then execute your code And I mean execute your code with the results from the query :-) not from the user input. -- Arjen http://www.hondenpage.com |