delete image

[Marcos01]

Hi all,

 

I use 2 dropdown boxes to select the image I want to delete. First select directory and then select the image. The path to the image: ../userfiles/images/projects/

 

How do I use the path in the code?

 

This is the code so far:

 

//delete image:

 

$folder = $_POST["folder"];

$image = $_POST["images"];

 

//delete image

if ($_POST['doaction']=='submit'.'delete')

{

unlink($folder.$image);

}

 

 

 

[genericnumber1]

That's not really the best method... what if someone passes ../../../ for the dir and index.php for the image? There goes your homepage. I would strip all of the .. and / from both inputs. After you've done that..

 

unlink("../userfiles/images/projects/$folder/$image");

 

should suffice.

[DarkWater]

You should also make sure that the file exists first to make sure they didn't pass their own string in by editing the POST data.

[redarrow]

Example for delete a file..........

 

This will work so be very carefull remeber, once a file is deleted

it gon for good!.

 

<?php

   chdir('../pics/'); //cheek the directory there.........
    $do = unlink($fileToDel); // delete the file from the cheeked directory......
    if($do=="1"){ // if do ==1 then echo file was deleted.........
        echo "The file was deleted successfully.";
    } else { echo "There was an error trying to delete the file."; }// if file not there then echo message
?>

[Marcos01]

Thanks for the replies. Unfortunately it didn't work.

I tried this code first code:

$folder = $_POST["folders"];
$image = $_POST["images"];

if ($_POST['doaction']=='submit'.'delete') 
  { 
unlink("../userfiles/images/projecten/$folder/$image");
  }

 

Next I will try your code redarrow

[Marcos01]

Tried this code too but didn't work. I am not getting any errors.

$folder = $_POST["folders"];
$image = $_POST["images"];
$path = "../userfiles/images/projecten/";

if ($_POST['doaction']=='bevestigen'.'wissen') 
{ 

  chdir('../userfiles/images/projecten/'.$folder.'/'); 
    $do = unlink($image); 
    if($do=="1"){ 
        echo "The file was deleted successfully.";
    } else { echo "There was an error trying to delete the file."; }
}