How to pass variable from php to javascript, as attribute?

Question

I want to pass a variable from php to HTML as "attribute" so that javascript (jQuery) could access that.

$variable = addslashes(   this is the text, coming from database, which can contain '' ' ' ' ' or "" " " " "" " or even <br><hr> tags   );

HTML:

<img id="clickMe" titleAttr="<?php echo $variable; ?>" />

JS:

$('#clickMe').click(function() {
    alert ($(this).attr('titleAttr'));
});

now Firefox say its a bad HTML code, and alert() shows the text until the first ' signal (the rest is cut off)

Quentin · Accepted Answer · 2014-04-02 12:00:33Z

5

You want htmlspecialchars not addslashes.

There is almost always a better escaping mechanism than addslashes for any situation, and when there isn't, addslashes is rarely sufficient so you need to write one.

addslashes is particularly poor for inserting data into HTML since \ is not an escape character in HTML.

answered Apr 2, 2014 at 12:00

Quentin

949k136 gold badges1.3k silver badges1.4k bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

John Smith Over a year ago

"since \ is not an escape character in HTML." that was the key

Collectives™ on Stack Overflow

How to pass variable from php to javascript, as attribute?

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related