delete code problem

[S A N T A]

ok so i am trying to allow a button to be pushed that deletes an input from the database here is the code:

 

if($_POST['delete']) {
$db = mysql_connect($dbhost, $dbuser);
	mysql_select_db($dbdatabase, $db);


mysql_query("DELETE FROM comments WHERE id='" . $idofcom . "'");
mysql_query("DELETE FROM comments WHERE blog_id='" . $blogidofcom . "'");
mysql_query("DELETE FROM comments WHERE dateposted='" . $commrow['dateposted'] . "'");
mysql_query("DELETE FROM comments WHERE name='" . $commrow['name'] . "'");
mysql_query("DELETE FROM comments WHERE comment='" . $commrow['comment'] . "'");

}

 

but it doesn't work here is my delete button:

			if(isset($_SESSION['ADMIN']) == TRUE) {
		$idofcom = $commrow['id'];
		$blogidofcom = $commrow['blog_id'];
		?>
		<form action="<?php echo $SCRIPT_NAME . "?id=" . $validentry; ?>" method="post">
		<input type="submit" name="delete" value="Delete">
		</form>
		<?php

		}

Thanks in advance

[revraz]

Usually when something like this doesn't work it's because your SQL is wrong, usually from a bad variable.  Echo everything out and hopefully you'll catch it.

[jonsjava]

you're using a query that we aren't seeing run to define variables.  You will need to re-run the query to get those variables defined:

$commrow[''];

[S A N T A]

what do you mean?

[S A N T A]

sorry for double post but this is the entire code:

 

<?php
session_start();
require("config.php");
?>

<?php
if(isset($_GET['id']) == TRUE) {
if(is_numeric($_GET['id']) == FALSE) {
	$error = 1;
}

if($error == 1) {
	header("Location: " . $config_basedir);
} else {
	$validentry = $_GET['id'];
}
} else {
$validentry = 0;
}
if($_POST['delete']) {
$db = mysql_connect($dbhost, $dbuser);
	mysql_select_db($dbdatabase, $db);



mysql_query("DELETE FROM comments WHERE id='" . $idofcom . "'");
mysql_query("DELETE FROM comments WHERE blog_id='" . $blogidofcom . "'");
mysql_query("DELETE FROM comments WHERE dateposted='" . $commrow['dateposted'] . "'");
mysql_query("DELETE FROM comments WHERE name='" . $commrow['name'] . "'");
mysql_query("DELETE FROM comments WHERE comment='" . $commrow['comment'] . "'");

}





if ( $_POST['submit'] ) {

if ( $_POST['comment'] == "" ) 
        {
     echo "Please write a comment";
}


$db = mysql_connect($dbhost, $dbuser);
	mysql_select_db($dbdatabase, $db);

	$sql = "INSERT INTO comments(blog_id, dateposted, name, comment) VALUES(" . $validentry . ", NOW(), '" . $_SESSION['USERNAME'] . "', '" . $_POST['comment'] . "');";
	mysql_query($sql) or die(mysql_error(). "   in $sql");
	header('Location: /submited.php');

} else {
	//code will go here
}

require("header.php");

if($validentry == 0) {
$sql = "SELECT entries.*, categories.cat FROM entries, categories " .
"WHERE entries.cat_id = categories.id " .
"ORDER BY dateposted DESC " .
" LIMIT 1;";
} else {
	$sql = "SELECT entries.*, categories.cat FROM entries, categories " .
"WHERE entries.cat_id = categories.id AND entries.id = " . $validentry .
" ORDER BY dateposted DESC LIMIT 1;";
}

$result = mysql_query($sql)or die(mysql_error());

$row = mysql_fetch_assoc($result);
echo "<h2>" . $row['subject'] . "</h2><br />";
echo "<i>In <a href='viewcat.php?id=" . $row['cat_id'] ."'>" .
$row ['cat'] ."</a> - Posted on " . date("D jS FY g.iA", strtotime($row['dateposted'])) ."</i>";
if(isset($_SESSION['ADMIN']) == TRUE) {
echo" [<a href='updateentry.php?id=" . $row['id'] . "'>edit</a>]";
}
echo "<p>";
echo nl2br($row['body']);
echo "</p>";

$commsql = "SELECT * FROM comments WHERE blog_id = " . $validentry . " ORDER BY dateposted DESC;";	
$commresult = mysql_query($commsql);
$numrows_comm = mysql_num_rows($commresult);
if(isset($_SESSION['USERNAME']) == TRUE) {
if($numrows_comm == 0) {
	echo "<p>No comments.</p>";
} else {
	$i = 1;

	while($commrow = mysql_fetch_assoc($commresult)) {

		echo "<a name='comment" . $i . "'>";
		echo "<h3>Comment by " . $commrow['name'] . " on " . date("D jS F Y g.iA",
		strtotime($commrow['dateposted'])) . "</h3>";
		if(isset($_SESSION['ADMIN']) == TRUE) {
		$idofcom = $commrow['id'];
		$blogidofcom = $commrow['blog_id'];
		?>
		<form action="<?php echo $SCRIPT_NAME . "?id=" . $validentry; ?>" method="post">
		<input type="submit" name="delete" value="Delete">
		</form>
		<?php
echo $idofcom; ?><br />

<?php echo $blogidofcom; ?><br />

<?php echo $commrow['dateposted']; ?><br />

<?php echo $commrow['name']; ?><br />

<?php echo $commrow['comment']; ?><br />
<?php

		}
		echo $commrow['comment'];
		$i++;

	}
	}






?>

<form action="<?php echo $SCRIPT_NAME . "?id=" . $validentry; ?>" method="post">
<table>
<tr>
<td>
<h3>Leave a comment</h3>
</td>
</tr>

<tr>
<td>Comments</td>
<td><textarea name="comment" rows="10" cols="50"></textarea></td>
</tr>
<tr>
<td></td>
<td><input type="submit" name="submit" value="Add Comment"></td>
</tr>
<tr>
<td>
<font size="-2">Do not post inapropriate comments or they will be deleted</font>
</td>
</tr>
</form>
</table>




<?php 

} else {
echo "Login to view/add comments!";

}

require("footer.php");
?>