How to parse file without using eval - PHP?

Question

Is there any other way to parse the file without eval()? I'm trying to render the php code without using php tags inside index.gs and so far i can do it only with eval(). The problem is not only to parse vars, but custom template characters.

here is the sample of code below.

 $render = file_get_contents($this->file);

 $render = $this->parse_extends($render);
 $render = $this->parse_assets($render);
 $render = $this->parse_vars($render);
 $render = $this->parse_vars_skip($render);

  try {
        ob_start();
        eval('?>' . $render);
        $render = ob_get_contents();
    } finally {
        ob_get_clean();
    }
    return $render;

The return $render - return to View::class code for response

"I'm trying to render the php code without using php tags" – why…? — deceze
– deceze ♦, Commented Nov 23, 2017 at 12:07
Maybe highlight_file php.net/manual/en/function.highlight-file.php is what you are looking for? — alistaircol
– alistaircol, Commented Nov 23, 2017 at 12:10

Mark Baker · Accepted Answer · 2017-11-23 12:10:39Z

1

If the allow_url_include directive is enabled in php.ini, then it’s possible to execute this code using

include "data://text/plain;base64," . base64_encode($render);

but this setting is disabled by default, and cannot be changed within user code, but only through editing the php.ini file; so unless explicitly enabled in php.ini (and there normally isn’t any good reason why it should be), then it isn’t really an option.

An alternative is to create a temporary file, write the code there, and then execute it using include:

$tempFilename = tempnam("/tmp", "MyTemplate");
file_put_contents($tempFilename, $render);
include $tempFilename;
unlink($tempFilename);

But both have similar issues and dangers to eval().

answered Nov 23, 2017 at 12:10

Mark Baker

213k34 gold badges354 silver badges390 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Neo Cotic Over a year ago

Yes I already tried second way, but it was not good if you have only layout.master.gs and index.gs then yes but if you yield other files or include then it's not good

Niet the Dark Absol Over a year ago

The second one is honestly just eval but using the filesystem instead of RAM to store the code to be evaluated, which is kinda silly ;)

Collectives™ on Stack Overflow

How to parse file without using eval - PHP?

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related