Question

How to make own simple, fast and secure PHP MySQL template without eval() for MySQL record:

+--------------------------------------------------------------+
|  id | content                                                |
|--------------------------------------------------------------|
|  12 | Today is {date}<br />Current time {include 'time.php'} |
+--------------------------------------------------------------+

{date} must return echo date('l'); and time.php content is <?php echo date('h:i A'); ?>

Expected result would be:

Today is Thursday
Current time 23:17 PM

Answer 1

It’s possible trough preg_replace. Example for include:

function finclude($file){
    return include($file);
}

$str = "Today is {include 'date.php'}.";
echo preg_replace("/\{include '(.*)\'}/e", 'finclude("$1")', $str);

date.php:

<?php return date('jS \of F'); ?>, 2011

will return: Today is 20th of July.

Does anyone knows some better way (secure, speed performance) to do it without /e eval?