I'm allowing anonymous users the ability to create nodes using a form. But I want to allow them the ability to delete them again straight away.
Instead of forcing them to create an account and take control of the node, I want to just give a use-ajax link that deletes the node. The $_SESSION variable would have the NID and the code to print the link would check for that.
To add some semblence of security, I'm thinking of adding the timestamp in the link and my module only deletes the node if the timestamp matches.
Is that secure enough? The same content type will be used by logged in users so it has to be fool-proof.