Question

Basically, I’m taking user input and passing it to a javascript function in a page from php. But because the user use’s apostrophes, I’m getting errors. What’s the proper escape function in php to use on a variable that will be surrounded by quotes. IE:

Some php:

$userString = "Joe's Pizza";
// escape here
echo "<script type=\"text/javascript\">myFunction('$userString');</script>";

Thanks much!

Answer 1

addslashes; e.g.

$userString = addslashes("Joe's Pizza");
print '<script type="text/javascript">myFunction('$userString');</script>";;