<?php session_start(); if (!isset($_SESSION['admin_id'])) { header('Location: login.php'); exit; } include '../db.php'; // Validate and sanitize ID $id = isset($_GET['id']) ? intval($_GET['id']) : 0; if ($id > 0) { $stmt = $pdo->prepare("DELETE FROM reviews WHERE id = ?"); $stmt->execute([$id]); } // Redirect back to manage_review.php (note: your old file was called manage_reviews.php) header('Location: manage_review.php'); exit; ?>