How To Escape a PHP Variable in Javascript?

Question

I am trying to create a Javascript function that echoes out a Wordpress function called the_title() which just returns the title of the a blog. Through PHP it echoes out fine but when I do it through Javscript, however, quotes seem to be unescaped (specifically single quotes). Any help or explanation why this is happening?

THE CODE:

function createSliderTabs() {   
    var para = document.createElement("li");
    var strings = "<?php the_title(); ?>";
    var post_string = strings.replace(/"/g, "").replace(/'/g, "").replace(/\(|\)/g, "");
    var node = document.createTextNode(post_string);
    para.appendChild(node);
    var element = document.getElementById("control-navigation");
    element.appendChild(para);
}

    createSliderTabs();

THE RESULT:
Macy&#8217 ;s Herald Square (had to include space or it would've changed to single quote)

WHAT IT SHOULD BE:
Macy's Herald Square

Any help or guidance on why this is happening? Thx in advance...

WordPress is printing the title with ’. And as you use a text node which can’t contain HTML, you see ’ and not ’, the character which ’ refers to. — Gumbo
– Gumbo, Commented May 30, 2014 at 22:58
Perhaps make node a span rather than a textnode, and set its innerHTML to post_string? That might not work, just throwin' out ideas. — Pete Scott
– Pete Scott, Commented May 30, 2014 at 23:15

Community · Accepted Answer · 2017-05-23 11:50:26Z

2

From php to js transformation you always have to use json_encode().

to avoid xss
to describe unicode characters

edited May 23, 2017 at 11:50

CommunityBot

11 silver badge

answered May 30, 2014 at 23:22

inf3rno

26.3k13 gold badges122 silver badges208 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

developerwjk · Accepted Answer · 2014-05-30 23:36:41Z

-1

You can use html_entity_decode:

I'm not really familiar with wordpress, but I suppose you would use it inside the_title():

function the_title()
{
   $str = 'Macy&#8217;s Herald Square';
   echo html_entity_decode ($str, ENT_COMPAT , "UTF-8");
}

If you need to use json_encode() you should be able to do

$json = html_entity_decode(json_encode($array), ENT_COMPAT , "UTF-8");

EDIT: added ENT_COMPAT , "UTF-8"

edited May 30, 2014 at 23:36

answered May 30, 2014 at 23:17

developerwjk

8,6342 gold badges20 silver badges33 bronze badges

Collectives™ on Stack Overflow

How To Escape a PHP Variable in Javascript?

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related