Html src = a php variable

Question

Hello I looked around a bit for a solution but couldn't find someone with the exact problem as me. Basically I have a php variable that is a url. I want to add a new iframe with that url.

This is what I have, but because HTML is using the double quotes after src the php variable is ignored.

<iframe width="420" height="345"src= "<?php $output ?>"> </iframe>

Thank you guys

Answer 1

<iframe width="420" height="345" src="<?php echo htmlspecialchars($output); ?>"> </iframe>

You're missing echo. Also, always use htmlspecialchars() to ensure you are creating valid HTML that isn't vulnerable to injection. If you find yourself doing this a lot, consider using a template engine.