<? 
  $configPath = substr(__DIR__,0,strpos(__DIR__,"/public_html"))."/config.php";
  include_once($configPath);
  $error = true;

  if (!empty($_SESSION["utente"]) && $_SESSION["utente"]->permission($radice) && $_SESSION["utente"]->permission("mercato")) {
    $bind = array(":codice"=>$_POST["codice"]);
    $sql = "DELETE FROM b_carrello WHERE codice = :codice ";

    $ris = $pdo->go($sql,$bind);
    if ($ris->rowCount() === 1) {
      $error = false;
      scriviLog("b_carrello","DELETE",$pdo->getSQL(),$_POST["codice"]);
      ?>
        window.location.reload();
      <?
    }
  }

  if ($error) {
    header('HTTP/1.0 403 Forbidden');
    die();
  }
?>