[karthikanov24]

hi

Code:

echo "<a href=\" " . $_SERVER['PHPSELF'] . "?c=$catId&p=$pd_id" . "\">link</a>";

the value of $_SERVER['PHP_SELF'] is /plaincart/index.php in my application

There are totally 8 double quotes present in the above code.

The second and seventh double quotes are similar to "abc.php" in <a href="abc.php"> {an example}

But why third and sixth double quotes and concatination (.) which is present before and after
$_SERVER['PHPSELF'] . "?c=$catId&p=$pd_id"
is used??

thanks
karthikanov24

[End User]

Originally Posted by karthikanov24

Code:

echo "<a href=\" " . $_SERVER['PHPSELF'] . "?c=$catId&p=$pd_id" . "\">link</a>";

But why third and sixth double quotes and concatination (.) which is present before and after
$_SERVER['PHPSELF'] . "?c=$catId&p=$pd_id"
is used??

They're being used to jump in and out of the print statement so the value of "$_SERVER['PHPSELF']" can be inserted inline.

[wirehopper]

PHP_SELF has security vulnerabilities: PHP Tutorials Examples PHP Security

[Neville1985]

I rather doing this:

PHP Code:

echo "<a href=\"{$_SERVER['PHP_SELF']}?c=$catId&p=$pd_id\">link</a>"; 

Saves on escaping the string, less typing, whitespace blah blah. My personal taste