Download
Download UIEngine
Current version v15 – externally security-audited, PHP 8.1+, zero dependencies.
What's included?
- src/ – engine source code (compiler, sandbox, manager classes)
- tests/ – PHPUnit test suite
- demo/ – runnable example project with sample templates
- GUIDE.md – detailed 17-part guide
- CHANGELOG.md – full version history
System requirements
- PHP 8.1 or newer
- Write permissions for the cache and log directories
- No PHP extensions beyond a standard PHP install required
Quick install
unzip UIEngine_v15.zip
cd UIEngine
require 'src/Autoload.php';
Detailed steps including assigning variables and your first template are in the guide.
Release notes v15
The result of an external security audit, every point fixed:
- Fixed a path-traversal bypass in {fetch}: allowed prefixes are now resolved via realpath() instead of a plain text-prefix comparison.
- {$engine.const.*} now always blocks sensitive constant name patterns (PASSWORD, SECRET, API_KEY, TOKEN, ...) – even without a security policy set.
- Fixed a crash in CacheManager when no engine instance is provided (nullable property instead of an uninitialized access).
- Debug output is now disabled by default instead of enabled by default.
- JavaScript escaping now also handles the Unicode line separators U+2028/U+2029.
License
The exact license terms are included in the download package. Check there first for any questions about usage in your project.