I am trying to call a JavaScript function with parameter as php script using the following code
<a href="javascript: submitform(<?php echo $job; ?>)">submit</a>
any suggestions will be appreciated
-
1you can't Javascript is client side. and php is server side. they won't understand each other on their own.Yaje– Yaje2014-07-03 09:55:41 +00:00Commented Jul 3, 2014 at 9:55
-
@ejay_francisco I wrote the javascript inside the php file but the problem is with the parameter, how its should be writtenuser3801082– user38010822014-07-03 09:58:08 +00:00Commented Jul 3, 2014 at 9:58
Add a comment
|
4 Answers
Use something like this
<a href="#" onclick="submitform(<?php echo $job; ?>);"> submit</a>
OR
var job ='';
job = <?php echo $job; ?>;
<a href="#" onclick="submitform(job);"> submit</a>
1 Comment
Niet the Dark Absol
If
$job = "); alert('lol hax'" then you're in trouble.If $job is anything but a number, your code will fail.
To drop a PHP variable into a JavaScript context, you must use json_encode. Since you're in an HTML attribute, you must also use htmlspecialchars.
So:
<a href="javascript:submitform(<?php echo htmlspecialchars(json_encode($job));?>);">
answered Jul 3, 2014 at 10:00
Niet the Dark Absol
326k86 gold badges480 silver badges604 bronze badges
Comments
You can write in php directly
<?php
echo '<a href="#" onclick="javascript: submitform(\"'+$job+'\")">submit</a>';
?>
Comments
You can also use any of this two
<a href="javascript:void(0);" onclick="submitform(<?php echo $job; ?>);">submit</a>
<a href="javascript:;" onclick="submitform(<?php echo $job; ?>);">submit</a>
1 Comment
Niet the Dark Absol
What if
$job contains an apostrophe? Or a double-quote? XSS alert!