PHP - Deleting variable and file together

[auriaks]

Hi,
I have file uploading system which saves file and some info about it:

$target_path = "uploads/"; // directory CHMODed to 777.

$target_path = $target_path . basename( $_FILES['uploadedfile']['name']); 

move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path); 
$filename = basename($_FILES['uploadedfile']['name']); 

so I have file saved in uploads/ and also I have $filename
how I can delete file and all the row in mysql by pushing one button???

If you need more info -ask thanks

[Nile]

To delete a file, use unlink, to delete a variable use unset.

Maybe?:

unlink($target_path); 

[djr33]

1. File: as above, use unlink() in PHP-- use the filename AND path, so unlink('uploads/example.file');

2. To delete from a mysql database, use the DELETE command:
DELETE FROM `tablename` WHERE `something` = `somevalue`;

(For example, `id`=`8`, or `filename`=`example.file`)

[auriaks]

I got unlinking problem

Warning: unlink() [function.unlink]: http does not allow unlinking in /home/freecorplietuv/domains/laisvasprotas.xz.lt/public_html/admin/patvirtinti.php on line 19 

in row 19 is written: $del = unlink($file_path);

Whats wrong?

[Nile]

You can't unlink 'http://'

[auriaks]

then what I have to unlink??
Can you post some egzamples?

[Nile]

unlink("file.php"); 

$filepath has a prefix of http://

[bluewalrus]

<form method="post">
<input name="set" type="hidden" value="1" />
<input type="submit" value="Delete" />
</form>
if (isset($_POST['set'])) {
unlink($target_path . $filename);
SQL commands here to remove
} 

[djr33]

1. bluewalrus, that code is fine but very dangerous: having direct user input to deleting files is very messy. Some sort of error checking would be very wise. Make sure they aren't deleting a higher level folder, and make sure the folder exists before unlinking it, at the very least. Unless this is a very limited application, it's best to only allow that sort of thing for logged in admins, etc. Otherwise, having some sort of non-transparent system is best, like a form that corresponds to a database where the real path is stored-- then it is hidden from the users so they can't write in any folder to delete-- only the ones stored in the database.

2. "http:"-- You do not use the URL (like "http://example.com/file.php"). Instead, use the RELATIVE path: (file.php) or (directory/file.php), etc.

[Nile]

djr33, you cannot delete higher level files. But yes - NOT secure.