将Javascript代码存储在PHP变量中？

Question

I would like to store JavaScript code in a PHP variable, in order to inject it multiple times into my main code:

<?php

$PASSME = <<<PASSME
alert("hello world");
PASSME;

echo "<a onclick=$PASSME >Click here</a>";

?>

In Google Chrome I can read this source code:

<a onclick="alert("hello" world");>Click here</a>

So I noticed this:

"hello" world" should be "hello world"

What am I doing wrong?

NB: I am actually working on a more complex project. I tried to make an example in order to understand how to correctly do it.

Answer 1

As I commented you used double quoetes in double quotes, use single quotes instead:

<?php

$PASSME = <<<PASSME
alert('hello world');
PASSME;

echo "<a onclick=\"$PASSME\" >Click here</a>";

?>

This will result in correct code:

<a onclick="alert('hello world');">Click here</a>

When having a lot of code, just pass variables from php to js, ie:

<?php

$PASSME = <<<PASSME
var message = 'hello world'
PASSME;
?>
<script>
<?= $PASSME; ?>
</script>
<?
echo "<a onclick=\"alert(message)\">Click here</a>";
?>

Answer 2

The problem is that your attribute value contains space characters and is not delimited with quote characters.

<?php
  $html_safe_passme = htmlspecialchars($PASSME, ENT_QUOTES);
?>
<a onclick="<?php echo $html_safe_passme; ?>">Click here</a>

Answer 3

You need to escape the " to " in the HTML attribute value. You also need to delimit the attribute value with double-quotes (which mustn't be encoded) because it contains spaces, like so:

(Also, personally I wouldn't use PHP's <<< for strings)

$passme = "alert("hello world");";

echo "<a onclick=\"$passme\">click here</a>";

Answer 4

像这样尝试，用单引号引起来：

alert('hello world');

Answer 5

Use following (You missed Quotes around variable)

 <?php

$PASSME = <<<PASSME
alert("hello world");
PASSME;

echo "<a onclick='".$PASSME."' >Click here</a>";

?>

Answer 6

<?php

$PASSME = "alert('hello&nbsp;world');";

echo "<a onclick=". $PASSME . " >Click here</a>";

?>

try to add   to change space in your code. and DONE!