我是否需要清理从文件中获取的 php 代码？

Question

I am using ajax and php for my current application right now. I give an action for each ajax request I make. I know that I can just give different urls to each individual request, but I want all my actions to be in one file. However, I want the one file to catch every file in a specific directory get the action from there and put it in the main file. So I would loop each individual file and fetch the content in them.

---

The code I'm using is the following:

public function fetchActions() {
    $output = "";
    $actions = glob("actions/*");

    for ($i = 0; $i < count(glob('actions/*')); $i++) {
        $output .= file_get_contents($actions[$i]) . " ";
    }

    return $output;
}

---

In the file I'm calling this I'm using:

echo eval($methods->fetchActions());

---

EDIT: The reason why I'm asking is because I heard eval() function shouldn't really be used unless necessary. They also said if I use the eval() function I should sanitize the code before eval() the code.

Answer 1

Never use eval() just use it if there is no other way, but for sure there is other ways. You have to break your head but is better than someone breaks your code and security.