how to put php scripts in html scripts in a php script

Question

I know my question is kind of confusing but what I meant is that I want to display an HTML form in a PHP 'echo'. So my entire HTML code is inside my php open and closing tags and then inside my HTML script I wanted to have a php code but I get an error saying:

Parse error: syntax error, unexpected 'echo' (T_ECHO), expecting ',' or ';'

and my code goes something like this:

<?php
   echo '<form method="post" id="customForm" action="add_assessment.php">
    <table>
     // this line is where I get the error
    <input type="hidden" name="res_id" value='echo($_GET['res_id']);' />
?>

inside an echo statement, don't again put echo, just concatenate the variable with help of concatenation operater, in php that is . (dot) operator. — Hafiz
– Hafiz, Commented Jan 3, 2013 at 15:48

Sharlike · Accepted Answer · 2013-01-03 14:57:36Z

5

You can use . to concatenate strings in PHP. So you could write it like so:

<?php
   echo '<form method="post" id="customForm" action="add_assessment.php">
    <table>
     // this line is where I get the error
   <input type="hidden" name="res_id" value="'.$_GET['res_id'].'" />';
?>

edited Jan 3, 2013 at 14:57

answered Jan 3, 2013 at 14:42

Sharlike

1,7992 gold badges19 silver badges30 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Jeffrey Over a year ago

Good job, now the HTML is not exactly valid anymore

Sharlike Over a year ago

I just modified OP's example, if they need help with the html I think it would be seperate

Jeffrey Over a year ago

Correct their mistake. It's obviously because the OP was trying to use the piece of PHP code inside the form's HTML, not because they don't know how to write valid HTML

Sharlike Over a year ago

You are right, I modified my answer. Thought you were referring to the missing tags.

DampeS8N · Accepted Answer · 2013-01-03 15:15:31Z

. can be used to concatenate strings. You can also use , which sends them as separate echos.

<?php
   echo '<form method="post" id="customForm" action="add_assessment.php">
    <table>
    <input type="hidden" name="res_id" value="' . intval($_GET['res_id']) . '" />';
?>

Don't forget XSS protections. The intval() is turning the user input from $_GET into an integer, ensuring that it isn't malicious. It seems this is an important ID for your system. You should ensure that changing it won't break your code, if it will, consider using Sessions instead.

XSS or Cross Site Scripting, is when an attack injects javascript onto your page in an attempt to make it work differently or redirect the user. In this case, an attacker could send this form to a different location. If this form contains Credit Card info, other personal info, or internal data from your application; an attacker could gain access to that info simply by linking a user to the form with the bad data in it.

If setup right, the user might not ever even know they had their information stolen!

Wojciech Zylinski · Accepted Answer · 2013-01-03 14:40:54Z

1

<?php
   echo '<form method="post" id="customForm" action="add_assessment.php">
    <table>
    <input type="hidden" name="res_id" value="' . $_GET['res_id'] . '" />';
?>

answered Jan 3, 2013 at 14:40

Wojciech Zylinski

2,03514 silver badges19 bronze badges

2 Comments

11684 Over a year ago

If you would have explained the difference, I would have upvoted the answer.

shabeer90 Over a year ago

The original code misses a single quote and a semicolon after /> , and in php external elements are added using the double dot(.YourElement.) , its like using the plus(+) in java or javascript

Jeffrey · Accepted Answer · 2013-01-03 14:41:28Z

1

Here you go:

<?php
   echo '<form method="post" id="customForm" action="add_assessment.php">
    <table>
    <input type="hidden" name="res_id" value="' . $_GET['res_id'] . '" />';
?>

answered Jan 3, 2013 at 14:41

Jeffrey

1,2198 silver badges15 bronze badges

2 Comments

11684 Over a year ago

Please explain why, otherwise people who don't see the difference will just copy this code and start using code they don't understand.

Jeffrey Over a year ago

@11684 no need to comment that on every answer. Copy the code and explain it yourself

devOp · Accepted Answer · 2013-01-03 14:45:11Z

1

Here you find a explanation from the offical php documentation how to work with the php-tag: http://php.net/manual/en/language.basic-syntax.phpmode.php

answered Jan 3, 2013 at 14:45

devOp

3,1801 gold badge21 silver badges32 bronze badges

Collectives™ on Stack Overflow

how to put php scripts in html scripts in a php script

5 Answers 5

4 Comments

Comments

2 Comments

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

5 Answers 5

4 Comments

Comments

2 Comments

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related