在从php调用的脚本中创建新变量

Question

I'm using jquery-3.3.1.min to live update and calling it to my main.php

    <script type="text/javascript" src="js/jquery-3.3.1.min.js"></script>
    <script type="text/javascript">
            $(document).ready(function() {
            setInterval(function () {
            $('#show').load('smoke.php')
            $('#show2').load('pids.php')
            $('#show3').load('flame.php')
            $('#show4').load('panic.php')

                }, 2000);
            });

///// I'm echo in php using

                $smoke_status            = $row['smoke_status'];
                $pids_status             = $row['pids_status'];
                $flame_status            = $row['flame_status'];
                $panic_status            = $row['panic_status'];
                $startdate               = $row['startdate'];
                $stopdate                = $row['stopdate'];

                echo "<tr>";
                echo "<td id='show'></td>";
                echo "<td id='show2'></td>";
                echo "<td id='show3'></td>";
                echo "<td id='show4'></td>";
                echo "<td>$startdate</td>";
                echo "<td>$stopdate</td>";
                echo "</tr>";

but now...i want to make my live update data into a variable in script how can i declare it. i'm success calling this

          var i = <?php echo $panic_status  ?>;

and how can i call

             echo "<td id='show'></td>";
                echo "<td id='show2'></td>";
                echo "<td id='show3'></td>";
                echo "<td id='show4'></td>";

into new variable??plsss help and srry for the long question

Answer 1

Hello I do not know what you are actually doing with the code. its so scattered that one cannot easily know where to start

1.) You are displaying a result and i did not see where you are trying to escape those database with htmlentities() or htmlspecialchars() functions against xss attack.

2.) I do not know whether you are still using mysql_connect deprecated functions in your database query. if so please better move it to mysqli or PDO .

3.) i can see you calling simultaneously four php files simultaneously with 2 seconds call. What is it you are trying to achieve. This will cause alot of issues to the server including latency, poor performance and over consumption of data. If you need a real time update why don't you switch over to nodejs and socket.io.

To answer your question, I have created an ajax example to get you started

<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    <script>

         $(document).ready(function(){


         //$('#result').click(function(){

         var post1 = 'data to post if any';





        $('#loader').fadeIn(400).html('Please Wait. Data is being Loaded');


         // assuming that you want query result by posting a variable
         var datasend = "alert1="+ post1;

         $.ajax({

         type:'POST',
         url:'smoke.php',
         data:datasend,
         crossDomain: true,
         cache:false,
         success:function(msg){

         $('#loader').hide();
         $('#result').fadeIn('slow').prepend(msg);
         }

         });

         //})

         });


    </script>


<div id="loader"></div>
<div id="result"></div>

The above script will make a call to smoke.php and display any result contained there in

<?php

$smoke_status = 'I am not smoking';

/* if data is to be displayed in html form,  you have to escape it with either htmlspecialchars() or htmlentities() functions to ensure
that XXS attack is not possible. you can read further on how to escape both single, double quotes with it as case may be
*/
echo htmlspecialchars($smoke_status);
?>