Home/ Questions/Q 3229922
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-17T16:52:00+00:00

i have this jQuery code: $(#text_a).html(‘<textarea name = text>.$text_user.</textarea>’); And if I put in

  • 0

i have this jQuery code:

$("#text_a").html('<textarea name = "text">".$text_user."</textarea>');

And if I put in textarea text with new line i get this error:

unterminated string literal

I get an error with this text:

First line...
Second line ...
Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Assuming that this is actually a PHP question, I normally use json_encode() to generate JavaScript strings. E.g.:

    // Prints: var myString = "Hello\nWorld";
var myString = <?php echo json_encode("Hello\nWorld"); ?>;

    Back into JavaScript, you probably want to avoid HTML injection and XSS attacks:

    var myTextarea = $('<textarea name="text"></textarea>').text(<?php echo json_encode($text_user); ?>);
$("#text_a").html(myTextarea);

    Addendum

    A little test case that illustrates the need of proper escaping:

    <?php

$text_user = '</textarea><a href="http://www.google.com">Google></a><textarea>';

?><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head><title></title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js"></script>
<script type="text/javascript"><!--
jQuery(function($){
    // Proper escaping
    var myTextarea = $('<textarea name="text"></textarea>').text(<?php echo json_encode($text_user); ?>);
    $("#text_a").html(myTextarea);

    // HTML injection
    $("#text_b").html('<textarea name="text">' + <?php echo json_encode($text_user); ?> + '</textarea>');
});
//--></script>
</head>
<body>

<div id="text_a"></div>
<div id="text_b"></div>

</body>
</html>
    • 0