I am trying to access a PHP variable in JavaScript. I've escaped quotes in the PHP variable and the JavaScript won't pick it up. Without changing the $a1 php variable, how can I access it in JavaScript?
<?php
$a1 = "Here is the \"best\" apple around"; //<-- doesn't work in javascript...
$a2 = "Here is the best apple around"; //<--works fine in javascript...
?>
JavaScript:
<script type="text/javascript">
var str = "<?php echo $a1; ?>";
alert(str);
</script>
Use json_encode for simplicity and consistency. See the ideone example.
<?php
$a1 = "Here is the \"best\" apple around";
?>
var str = <?php echo json_encode($a1); ?>;
Result:
var str = "Here is the \"best\" apple around";
Don't supply quotes in the JavaScript itself, as those come from the encoded result as required.
Advantages:
json_encode prevents script-injection, with the default options.
json_encode is invalid, is that because it is a string rather than an object or an array? They changed that in the latest version of the JSON spec so that a json text can be any json value (surrounded by any amount of whitespace).
Depending on where you want to output your "str" ( in an alert or on a html page ) i would take different commands.
<script type="text/javascript">
var str = "<?php echo addslashes($a1); ?>";
alert(str);
</script>
If you would like to add it as a new DOM element i would prefer htmlspecialchars or htmlentities .
As an alternative:
var str = <?php echo json_encode($a1, JSON_UNESCAPED_UNICODE); ?>;
use htmlspecialchars to convert $a1
$a1 = htmlspecialchars("Here is the \"best\" apple around");
<?php echo addslashes($a1);?>'in both the PHP and the Javascript, e.g., codepad.org/SI71916p