delete_record.php

<?php

declare(strict_types=1);

/**
 * Deletes one row.
 *
 * POST only and CSRF protected: the previous version deleted on a plain GET,
 * which any link prefetch could trigger.
 */

require __DIR__ . '/lib/bootstrap.php';

use DbManager\Page;
use DbManager\Schema;

[$pdo, $database, $table] = Page::table();

$columns    = Schema::columns($pdo, $table);
$primaryKey = Schema::primaryKey($columns);
$listUrl    = url('view_table_data.php', ['db' => $database, 'table' => $table]);

if ($primaryKey === []) {
    Page::fail(__('data.no_pk'), $listUrl);
}

Page::handle(
    static function () use ($pdo, $table, $primaryKey): string {
        $submitted = is_array($_POST['key'] ?? null) ? $_POST['key'] : [];
        $key       = [];

        foreach ($primaryKey as $column) {
            if (!array_key_exists($column, $submitted)) {
                throw new RuntimeException(__('error.row_key_missing'));
            }

            $key[$column] = (string) $submitted[$column];
        }

        if (Schema::delete($pdo, $table, $key) === 0) {
            throw new RuntimeException(__('error.record_not_found'));
        }

        return __('data.deleted');
    },
    $listUrl
);