[SOLVED] Deleting Multiple Rows?

[vozzek]

Hi all,

 

I've got some php code running an SQL delete to remove rows from my shopping cart table (tbl_cart). It works on individual cart id's, but not when I want the entire cart emptied.

 

tbl_cart looks like this:

ct_id (cart id, this is the primary key)

pd_id (product id)

ct_qty (quantity)

ct_session_id (user's unique session id)

etc...

 

Here's the code:

 

<?php
// current session id
   $sid = session_id();

// $cid passed from view_cart page
// if $cid=0, then empty cart

if ($cid != 0) {	
	$sql  = "DELETE FROM tbl_cart
			 WHERE ct_id = $cid";  // This works
            } else {
    $sql  = "DELETE FROM tbl_cart
			 WHERE ct_session_id = $sid";  // This doesn't work
            }
    $result = mysql_query($sql) or die(mysql_error());
?>

 

If I pass $cid as a whole number, it deletes that row - effectively deleting that item from the cart. But when the user presses the EMPTY CART button, I call the above code by passing $cid as zero. At this point I want all records deleted that match the current user's session id, which is $sid.

 

The error I'm getting is:

 

Unknown column '785fdf3a1a755e2a2189fa3028f33f22' in 'where clause'

 

The crazy variable is of course, the session id.  Thanks in advance.

 

[fenway]

Echo $sql.

[vozzek]

I added an echo just before the mysql_query($sql).  Here's what printed:

 

DELETE FROM tbl_cart WHERE ct_session_id = 21ea32ef26924cf9e962a2b4f25f34bbUnknown column '21ea32ef26924cf9e962a2b4f25f34bb' in 'where clause'

 

[toplay]

Use quotes around any values (especially strings).

 

So, change this:

 

    $sql  = "DELETE FROM tbl_cart

WHERE ct_session_id = $sid";

 

To this:

 

    $sql  = "DELETE FROM tbl_cart

WHERE ct_session_id = '$sid'";

 

 

[vozzek]

Pefect!  Thanks so much, I should've thought of that.