Originally Posted by munozferna

This could be vulnerable to SQL injection (it depends on server settings):

Code:

if(isset($_GET['delete_id']))
  {
    DBConnect();
    $query = "DELETE FROM users WHERE id='" . $_GET['delete_id'] .
    "' AND username='" . $_GET['username'] .
    "' AND password='" . $_GET['password'] .
    "' AND email='" . $_GET['email'] .
    "'";
    DBQuery($query);
    $alertMsg .= "Account deleted.";
    DBDisconnect();
  }