Bizarre: Phantom quote marks

RadioGeek

This is just getting weird. Here is the code in question:

$s .= "<B><a href=javascript:popUp('/content/calendar/event.php?d=$m_day&m=$month&y=$year');>$d</a></B>";

(BY THE WAY: the php function on these forums is inserting that space "java script"...it is javascript on the post, i dunno what's going on there...)

$s is being added onto at this point...as you can see. (It's building a string to be written on the fly.)

Here is the problem:

The first time the page is loaded a quote mark appears between the ( and the ' characters. If you refresh or view the page subsequent times, the quote has vanished. (First view in a session, I mean. If I close the browser and go back and view the page the first time that session, the quote mark is back.)

I cannot figure out where this phantom quote mark (") is coming from! It's totally f**cking up the javascript insert I am doing.

Any help or ideas?

:mad:

bbaassiri

i just took a look at the source code on your homepage and it appears that the content manager is doing funny stuff

can you change the way you do the href like:

maybe a different approach my solve this headache

any thoughts?

jeremuck

explicitly escape everything.

RadioGeek

Originally posted by jeremuck
explicitly escape everything.

Stupid question. How?

jeremuck

Instead of something like:

"The dog's petri dish held the children's gum";

use:

"The dog\'s petri dish heal the children\'s gum";

In the first example, you are relying on PHP to "implicitly" guess where everything is.

In the second example, you explicitly tell PHP where the line begins and ends.

You might also use magic_quotes or a heredoc or something.

RadioGeek

Okay I tried that and it got weirder!

$s .= "<B><a href=javascript:popUp(\'/content/calendar/event.php?d=$m_day&m=$month&y=$year\');>$d</a></B>";

became:

<B><a href="javascript:popUp(\"'/content/calendar/event.php?d=23&m=10&y=2002\');>23</a></B>

See what I mean? This quote mark is coming from nowhere!

If I refresh, it's gone!

Also, should PHP be printing out the slash itself? I thought it was just used to escape characters, unless \' isn't a valid escape....

Hmm.

harlowhair

shouldn't the line

$s .= "<B><a href=javascript<img src="images/smilies/tongue.gif" border="0" alt="">opUp('/content/calendar/event.php?d=$m_day&m=$month&y=$year');>$d</a></B>"

have all of the double quotes escaped?

$s .= "<B><a href=javascript<img src=\"images/smilies/tongue.gif\" border=\"0\" alt=\"\">opUp('/content/calendar/event.php?d=$m_day&m=$month&y=$year');>$d</a></B>"

I realise that the line is a bit messed up, but you get the general idea.