Confirm delete & Checking if the id is in the database

addons/check_id_in_db.php

@@ -0,0 +1,12 @@
+<?php
+
+$result = $pdo->prepare('SELECT id FROM categories');
+$result->execute();
+$checkId = $result->fetchAll();
+
+$id_array = array();
+
+foreach($checkId as $id_in_database)
+{
+    array_push($id_array, $id_in_database['id']);
+}

index.php

@@ -1,6 +1,7 @@
 <?php
-include('db/pdo.php');
-include('utils/utils.php');
+require('db/pdo.php');
+require('utils/utils.php');
+require('addons/check_id_in_db.php');
 
 if(array_key_exists('v', $_GET)) {
 	$module = $_GET['v'];

modules/categories.php

@@ -17,17 +17,15 @@
     <?php
     foreach($categories as $category) {
     ?>
-
         <tr>
             <td><?php echo $category['id'];?></td>
             <td><?php echo $category['name'];?></td>
             <td>
                 <a href="index.php?v=edit_category&id=<?php echo $category['id'] ?>" class="btn btn-success">Edit</a>
             </td>
             <td>
-                <a href="index.php?v=delete_category&id=<?php echo $category['id'] ?>" class="btn btn-danger">Delete</a>
+                <a onclick="return confirm('Usunąć ten rekord?')" href="index.php?v=delete_category&id=<?php echo $category['id'] ?>" class="btn btn-danger">Delete</a>
             </td>
         </tr>
-
     <?php } ?>
-</table>
+</table>

modules/delete_category.php

@@ -1,9 +1,10 @@
 <?php
-if(!isset($_GET['id'])) {
-	header('location: index.php?v=categories');
-}
 
-$result = $pdo->prepare('DELETE FROM categories WHERE id = :id');
-$result->bindParam(':id', $_GET['id']);
-$result->execute();
-header('location: index.php?v=categories');
+if(!isset($_GET['id']) || !in_array($_GET['id'], $id_array)) {
+	header('location: index.php?v=categories');
+}else{
+    $result = $pdo->prepare('DELETE FROM categories WHERE id = :id');
+    $result->bindParam(':id', $_GET['id']);
+    $result->execute();
+    header('location: index.php?v=categories');
+}

modules/edit_category.php

@@ -9,14 +9,15 @@
 	header('location: index.php?v=categories');
 }
 
-if(!isset($_GET['id'])) {
-	header('location: index.php?v=categories');
+if(!isset($_GET['id']) || !in_array($_GET['id'], $id_array )) {
+    header('location: index.php?v=categories');
+}else{
+    $result = $pdo->prepare('SELECT * FROM categories WHERE id = :id');
+    $result->bindParam(':id', $_GET['id']);
+    $result->execute();
+    $category = $result->fetch();
 }
 
-$result = $pdo->prepare('SELECT * FROM categories WHERE id = :id');
-$result->bindParam(':id', $_GET['id']);
-$result->execute();
-$category = $result->fetch();
 
 ?>