kekec_bbs/delete.php~

<?php
require "${_SERVER['DOCUMENT_ROOT']}/database.php";


$mysqli = set_mysql ('miteruzo_bbs');

$mysqli -> set_charset ('utf8');

$thread = $_GET['thread'];
$id = $_GET['id'];
$pass = $_GET['pass'];

if ($result = $mysqli -> query ("
        SELECT
          pass
        FROM
          responses
        WHERE
          (thread_id = {$_GET['thread']}) AND (response_id = {$_GET['id']})")):
    $row = $result -> fetch_assoc ();

    if ($_GET['pass'] == $row['pass']):
    else:
        echo "残念．\n削除用パスワードが違います．<script>setTimeout (function () {window.location.href = `./?thread=$thread`}, 5000)</script>";
    endif;
endif;