不确定如何在 HTML 文件中使用 PHP function 文件，该文件利用 Z4C4AD5FCAED007A3F7A4DBB1 中的 JS 变量

Question

I have an index HTML page that grabs a user's username and password from a form.

I want to base 64 encode this before passing it to a php file that makes a request to a server with the encoded credentials.

I tried doing something like:

<script>
// The below function calls the PHP file responsible for retrieving campaign details. 
function getCampaignDetails() {
    var username = $('#username').val(); //This successfully returns the username.
    var password = $('#password').val(); //This successfully returns the password.
    
    var authentication_string = <?php $username = urldecode($_GET['username']); $password = urldecode($_GET['password']); echo base64_encode($username.':'.$password); ?>;
    
    $.ajax({
        type: "GET",
        url: "http://localhost/testing/get_campaign_details.php",
        headers: { 'Access-Control-Allow-Origin': '*' },
        data: {
            "authentication_string": authentication_string
        },
    });
}
</script>

But I get an error about an unexpected token < which I'm assuming is a syntax error in the authentication_string value. If I add quotes around this value, the php doesn't execute and I get the whole string as is passed to the php file, rather than the encoded credentials.

Is there a way to use PHP in a basic HTML file that grabs a JavaScript variable value, uses a PHP function to get a new value, and then pass back this new value to the data in an Ajax request from the HTML file that is then subsequently utilized by another PHP file?

Or is there a way to base 64 encode something using an HTML/JavaScript function instead of PHP function?

Best,

Answer 1

You need to add quotation marks around the php that you're running to get the authentication_string .

var authentication_string = "<?php $username = urldecode($_GET['username']); $password = urldecode($_GET['password']); echo base64_encode($username.':'.$password); ?>";

Javascript is expecting a value that it can assign to the variable authentication_string after the = like an int or a string. When it see's < it doesn't know what to do with it so it throws an unexpected token error.

As a sidenote - passing a username and password in the querystring (the url) is not a good idea. Even though they are encoded it's better to keep those kind of things away from prying eyes. There's a post here that might be helpful on how to handle sensitive data like that. Best way to pass a password via GET or POST