I'm trying to call PHP variable into HTML input field. Please see below code.
<html>
<?php
$A_variable = $_GET['some text'];
echo "<script type='text/javascript'>";
echo "document.getElementById('A_input').value = ";$A_variable;
echo "</script>";
?>
<input type="text" id="A_input" name="A_input" placeholder="input" Readonly>
</html>
Please, advice am I trying in a proper way? Your assistance is highly appreciated.
You don't need Javascript to achieve that,
simply,
<html>
<?php
$A_variable = $_GET['some text'];
?>
<input type="text" id="A_input" name="A_input" value="<?php echo $A_variable; ?>" placeholder="input" Readonly>
</html>
[Edited] Looking at code above we can make it even simpler
<html>
<input type="text" id="A_input" name="A_input" value="<?php echo $_GET['some text']; ?>" placeholder="input" Readonly>
</html>
PS: This way is not advisable since it vulnerable to XSS attack.
Simplest way to prevent XSS attack is by using stip_tags()
<html>
<input type="text" id="A_input" name="A_input" value="<?php echo strip_tags($_GET['some text']); ?>" placeholder="input" Readonly>
</html>
$A_variable, when you can echo $_GET['some text'] directly inside value attribute??
strip_tags will not protect this code from XSS attacks. some+text="%20onmouseover="alert('xss')"
$A_variableisn't a number), syntax error in PHP (;instead of.) and you call the script beforeinputexists. Check the console.