如何防止登录用户删除其他用户的帖子？

Question

I have a problem, I can not prevent a logged in user to delete post by others users? In my code now, I can delete all users posts, but I want to be able to only delete my posts (the logged in user posts). Can somebody help me in the right direction on how to do that?

<div class="deletebtn"><a href="../delete/delete.php?id=' . $row['id'] . '"class=\"icon-2 info-tooltip\">Delete post</a></div>



$id=$_GET['id'];

$sql="DELETE FROM shouts WHERE id='$id'";
$result=mysql_query($sql);

if($result)
{
    echo('<div class="deletedpost">You have deleted a post. <a href="../pages/content.php">Tillbaka till Bloggen</a></div>');
}
else 
{
    echo "Something went wrong";
}
mysql_close();  

Im using a href in one file, linking to another file where a use Sql code.

Answer 1

you can do this via session

check if user is logged in or not. if logged in then delete the post

if(isset($_SESSION['user']))
{
    //delete post
}

Store userId in your table and update your delete query like this...

$sql="DELETE FROM shouts WHERE id='$id' and userId = '$_SESSION[user]'";