Insert javascript string into HTML with PHP in WP

Question

I need to create some widget for WP and in widget's setting will be textarea, where user can insert some JS code. And then my widget must inject this code to WP's footer.php with this function:

add_action( 'wp_footer', 'inject_js', 10 );

In my inject_js I have:

function inject_js () { 

    echo esc_attr( get_option('js_code') );

}

Everything is working good and the code inserts into HTML, but I faced one problem. In my HTML I get something like this:

&lt;!-- BEGIN JS widget --&gt;
&lt;script type=&quot;text/javascript&quot;&gt;
    var __cp = {
        id: &quot;J4FGckYPdasda21OaTnqo6s7kMgeGXdTBAb6SgXMD-A&quot;
    };

As I understand I got the code from user's textarea in string type and I must do something with the quotes and other symbols, but I really don't know how to solve this issue, because I am new to PHP.

What PHP function must I use or it's possible to do with some WP functions?

I tried:

echo htmlspecialchars(esc_attr( get_option('js_code') ));

and

echo addslashes(esc_attr( get_option('js_code') ));

But nothing helped.

echo get_option('js_code'); ...esc_attr is escaping the value, funnily enough, so dont use that! — Steve
– Steve, Commented Jan 14, 2016 at 16:30
have you tried using html_decode? works fine ones I decode it my end. — TheHidden
– TheHidden, Commented Jan 14, 2016 at 16:30
@Steve, thanks a lot! It works for me! Maybe you post this comment as answer? — Vlad Turak
– Vlad Turak, Commented Jan 14, 2016 at 16:33
@user1779617 why encode the values (part of esc_attr) only to decode them again? Simply dont encode them in the 1st place — Steve
– Steve, Commented Jan 14, 2016 at 16:33

Steve · Accepted Answer · 2016-01-14 16:35:37Z

2

You are seeing the effect of esc_attr - the function is html encoding (amoungst other things) the string.

It is designed for untrusted user input. As your code is specifically designed to accept javascript from a trusted source (the site owner), dont use it.

echo get_option('js_code');

answered Jan 14, 2016 at 16:35

Steve

20.5k5 gold badges47 silver badges71 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

TheHidden · Accepted Answer · 2016-01-14 16:33:10Z

1

wrap your code in this :- like this:

 html_entity_decode(esc_attr( get_option('js_code')));

answered Jan 14, 2016 at 16:33

TheHidden

4821 gold badge9 silver badges20 bronze badges

Collectives™ on Stack Overflow

Insert javascript string into HTML with PHP in WP

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related