What risks do I have to consider when encrypting server side as opposed to client-side?

How do you indent JavaScript printed by PHP (or another server side language)?

• For a better idea of what I'm asking consider: A) No JavaScript indentation: echo "_____"; echo "_____"; echo "_____"; B) Within PHP source: echo "_____"; echo "_____"; echo "_____"; C) With spaces (so that resulting identation is visible in HTML source): echo "_____"; echo " _____"; echo " ______";

• Answer:

  There's rarely a good reason to do either of those options. If you really can't think of a better way to do it (e.g. simply using PHP to generate a JSON configuration object), then I would just embed PHP in the JS: /** * Generated JS */ myApp.foo = function(bar) { var pattern = '<?php echo $foo->getPattern(); ?>'; var id = '<?php echo $foo->getId(); ?>'; return bar.match(pattern); }; or create a JS template: /** * JS Template */ myApp.foo = function(bar) { var pattern = %pattern%; var id = %id%; return bar.match(pattern); };