who can help me?

nbslr

my code is this.

<?
require("global.php");
session_start();
?>
<Script Language=JavaScript>
function sss(){
  var show="<a href=\"javascript£ºparent.userClick('admin');\">admin</A>";
  this.document.writeln(show);
}
sss();
</Script>

i used session in this code ,
the resoult is error;
this is my resoult;

<Script Language=JavaScript>
function sss(){
  var show="<a href=\"PHPSESSID=f3c2334fac3450033f""javascript£ºparent.userClick('admin');\">admin</A>";
  this.document.writeln(show);
}
sss();
</Script>

how can i get rid of the code where is "PHPSESSID=f3c2334fac3450033f"

diego25

What do you mean by "releave"? My dictionary doesn't have such word...

Do you want to get rid of the hard-coded session ID? Then use the session_id() function. It returns the session ID.

Diego

nbslr

thank you
yes ,i will get rid of the code of session id in the code of the "<a href=\"PHPSESSID=f3c2334fac3450033f""javascript£ºparent.userClick('admin');\">admin</A>";
i want to get the code of "<a href=\"javascript£ºparent.userClick('admin');\">admin</A>";

stick_figure

My limited knowledge tells me that you should put the session_start() first. Call it superstition, but I know that you're supposed to put session_start() before any output, and I don't know if global.php is generating any.

Weedpacket

It seems like a bit of a kludge, but I reckon breaking the variable up into pieces ought to do the trick:

var show="<a " +"href=\"javascript:parent.userClick('admin');\">admin</A>";

or even

var show="<a hr" +"ef=\"javascript:parent.userClick('admin');\">admin</A>";

Ugly, but it will stop PHP from mistaking it for a relative URL (would using a span with an onClick handler work instead?)

nbslr

thank you !!
it's a good idea!!!
yes ,i will stop PHP from mistaking it for a relative URL