<?php
    include('../mb.php');
    
    if(!$_SESSION[userid]) {
	header("Location: $basehttp/login");
	exit();
    } 

    $id = mysqli_real_escape_string($dbconn,$_GET[id]);
    if(!is_numeric($id)) { exit(); } 

    if(is_numeric($_GET[approved])) {
        $approved=1;
    } 

    if(!$approved){			
        $drow = dbQuery("SELECT record_num,friend FROM friends WHERE record_num = '$id' AND approved = 0  AND (`friend` = '$_SESSION[userid]' || `user` = '$_SESSION[userid]')",false);	
        if($drow){		
            dbQuery("DELETE FROM friends WHERE record_num = '$id'");
        } else {
            exit();
        }
    } else {				
        $drow = dbQuery("SELECT user FROM friends WHERE record_num = '$id' AND approved = 1  AND  `friend` = '$_SESSION[userid]'",false);	
        if($drow){		
            $user=$drow[0]['user'];			
            dbQuery("DELETE FROM friends WHERE `user` = '$_SESSION[userid]' AND `friend` ='$user'"); 
            dbQuery("DELETE FROM friends WHERE record_num = '$id'");
        } else {
            exit();
        }
    }	

    exit();
?>