Ah, this is something I never thought about.
So, the URL is ?imageID=4
I create a recordset that searches the image via imageID=urlImageID AND userID=sessionUserID LIMIT 1
Should I SELECT the ID?
And this recordset ID I will use in the DELETE or UPDATE behavior?