将 php $_GET 变量存储在 javascript 变量中? [英] Storing php $_GET variable in a javascript variable?

问题描述

我正在使用 $_GET 方法(team1、team2)将两条信息传递给一个 php 页面.我想在一些 javascript 中使用这些作为变量.我该怎么做?

I am passing two pieces of info to a php page using the $_GET method (team1, team2). I'd like to use these as variables in some javascript. How can I do this?

谢谢

推荐答案

原答案:

在您的 .php 文件中.

In your .php file.

<script type="text/javascript"> 
  var team1, team2; 
  team1 = <?php echo $_GET['team1']; ?>; 
  team1 = <?php echo $_GET['team1']; ?>; 
</script>

更安全的答案:

当我爆出这个答案时，甚至没有考虑 XSS.(看评论！)$_GET 数组中的任何内容都应该转义，否则用户几乎可以将他们想要的任何 JS 插入到您的页面中.所以尝试这样的事情:

Didn't even think about XSS when I blasted this answer out. (Look at the comments!) Anything from the $_GET array should be escaped, otherwise a user can pretty much insert whatever JS they want into your page. So try something like this:

<script type="text/javascript"> 
  var team1, team2; 
  team1 = <?php echo htmlencode(json_encode($_GET['team1'])); ?>; 
  team1 = <?php echo htmlencode(json_encode($_GET['team1'])); ?>; 
</script>

从这里 http://www.bytetouch.com/blog/programming/protecting-php-scripts-from-cross-site-scripting-xss-attacks/.

来自 Google 的有关 XSS 的更多信息 http://code.google.com/p/doctype/wiki/ArticleXSSInJavaScript.

More about XSS from Google http://code.google.com/p/doctype/wiki/ArticleXSSInJavaScript.

为评论者干杯.

这篇关于将 php $_GET 变量存储在 javascript 变量中?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！