$val) $tpl->$key = $val; return $tpl->render($file); } public function secureHTML($val) { $out = stripslashes($val); $out = str_replace("'", "'", $out); $out = str_replace('"', """, $out); $out = str_replace("<", "<", $out); $out = str_replace(">", ">", $out); return $out; } public function render($file) { $paths = [ 'templates_user/' . $file . '.php', 'templates/' . $file . '.php', '../templates_user/' . $file . '.php', '../templates/' . $file . '.php', $file . '.php', ]; foreach ($paths as $path) { if (file_exists($path)) { return $this->renderFile($path); } } return '