How to safely specify a string parameter when generating JS in PHP?

Question

PHP

I came across this line in the old code and thought about it, but how to do it right here and so as not to get confused with quotes?

How to process $loginOriginal value so as not to break js syntax in html syntax.

//  $loginOriginal строка, понятное дело, в ней может быть что угодно
 // В переменной "собираются" атрибуты html
 $login .= " style=\"cursor:pointer\""
                ." onclick=\"chat.addTo('".addslashes($loginOriginal)."')\"";

Answer 1

Do you know what I usually do in such cases, so as not to get confused in all this mishmash of brackets? I save all JavaScript functions in separate files and, if necessary, simply insert them through file_get_contents("function_name.js") and then I don't have to worry about escaping. By analogy, you can store everything in the database if you need speed.

Answer 2

it seems to me that this option should cover all cases if the $loginOriginal string

htmlspecialchars(json_encode($loginOriginal), ENT_QUOTES, "UTF-8")