Use $_GET, $_SERVER variables in Javascript (jQuery / AJAX)

Question

So, heres a super simple jQuery / AJAX comment system step one. Step two is the PHP to insert the data into the DB. I need the $_GET['variable'] for the page / a $_SERVER['variable'] to store into the DB. How can I get these in the jquery. I can't just say $spot = $_GET['spot'] or $url = $_SERVER['FILE_SCRIPTNAME'] in the PHP. It won't pick it up. I has to be sent through the jQuery / AJAX. How can I do this?

$(document).ready(function() {
        $('#submit_comment').click(function() {
            var comment = $('#place_comment').val();
            // Somewhere here set the $_GET['variable'];
            $.ajax({
                type: 'POST',
                url: 'http://localhost/app/comment/comment.func.php',
                data: 'comment='+comment,
                success: function(data) {
                    $('#replies').html(data);
                    }
                });
            });
        });

You might know this already, but storing $_GET variables, or an user input, directly in the database is a very bad security practice. NEVER TRUST user input. You need to escape it before you store it, and escape it when you retrieve it, or you will have some nasty XXS security holes at least. SQL injection and nastier things are also a danger. — Jamison Dance
– Jamison Dance, Commented Nov 19, 2011 at 4:45

Bryan · Accepted Answer · 2011-11-19 04:03:43Z

2

If I understand what you are trying to do correctly, you can try something like this to use server-side PHP variables in your client-side javascript.

var comment = $('#place_comment').val();
var myVariable = '<?php echo $_GET['variable'] ?>';

answered Nov 19, 2011 at 4:03

Bryan

2,22121 silver badges28 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Ilyas karim Over a year ago

@Byran is there any possibility in jquery? You used php.

Gilles Quénot · Accepted Answer · 2011-11-19 04:08:00Z

-1

You can't do this like this : javascript is client-side and PHP $SERVER array is server-side.

edited Nov 19, 2011 at 4:08

answered Nov 19, 2011 at 4:01

Gilles Quénot

188k43 gold badges232 silver badges229 bronze badges

Collectives™ on Stack Overflow

Use $_GET, $_SERVER variables in Javascript (jQuery / AJAX)

2 Answers 2

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related