通过按钮onclick [关闭]调用PHP变量

Question

The goal is to call the variable $url when the button is clicked. With this current bit of code, when the button is clicked nothing happens and the error says unexpected token.

     <?php
        $url = "edit_beginningcakephp.php?title=$title&author=$author&isbn=$isbn
                &year=$year&pages=$pages&price=$price";
            >?

  <input type="button" value="Edit Book" onclick="window.location.href='<?= $url ?>'">

Answer 1

I suppose you're not correctly encoding the content of the variables (known as XSS)

You need to urlencode the content of your variables. Also, & needs to be entered as an HTML entity &.

Try:

$url = 'edit_beginningcakephp.php?title='.urlencode($title).'&author='.urlencode($author).'&isbn='.urlencode($isbn).'&year='.urlencode($year).'&pages='.urlencode($pages).'&price='.urlencode($price);

PS: >?should be ?> and make sure the URL doesn't contain any newlines.