Escaping quote in JavaScript and PHP

Question

<?php
    /* ... Getting record from database */

    $comment = $record["comment"];
    /* There might be quotes or double quotes, we don't know */

    echo "<input type='button' onclick=\"doSomething('$comment')\" />";
?>

<script>
    function doSomething(comment) {
        alert(comment);

        /* Something else */
    }
</script>

When $comment string contains a single quote , I'm getting " Uncaught SyntaxError: Unexpected token ILLEGAL " error in javascript.

• I add slashes before quotes, it didn't work - $comment = str_replace("'","\\'",$comment);

How can I escape quote and double quote in this example?

Answer 1

使用json_encode（） ，以确保您的输出在语法上是有效的JavaScript代码：

<input type="button" onclick="doSomething(<?php echo json_encode($comment) ?>">

Answer 2

使用PHP函数addlashes（） 。

Answer 3

You can try something like this in Javascript:

function addslashes(str){
    str=str.replace(//g,'\');
    str=str.replace(/'/g,''');
    str=str.replace(/"/g,'"');
    str=str.replace(//g,'');
    return str;
}
function stripslashes(str){
    str=str.replace(/'/g,''');
    str=str.replace(/"/g,'"');
    str=str.replace(//g,'');
    str=str.replace(/\/g,'');
    return str;
}

Hope this help :)