How Can I Safely Embed PHP Strings in JavaScript Variables?

Encoding PHP Strings for JavaScript Variables

When attempting to embed PHP strings containing quotes or newlines into JavaScript variables, it becomes necessary to properly encode them to avoid parsing errors. The most straightforward method for encoding these strings is through the PHP's json_encode() function.

To employ this function, ensure that you are utilizing PHP version 5.2.0 or later. Furthermore, the PHP string designated for encoding ($myVarValue) must be encoded in UTF-8 (or US-ASCII).

Incorporate the below code snippet into your PHP file:

<script>
  var myvar = <?= json_encode($myVarValue, JSON_UNESCAPED_UNICODE); ?>;
</script>

This code fragment utilizes json_encode() with the JSON_UNESCAPED_UNICODE flag, which ensures that all Unicode characters are encoded without escaping. Notably, the encoded string should be passed through htmlspecialchars() if it will be used within HTML attributes (such as onclick) to prevent issues with HTML entity interpretation.

The above is the detailed content of How Can I Safely Embed PHP Strings in JavaScript Variables?. For more information, please follow other related articles on the PHP Chinese website!