I know that you are able to put html in a database...

I am trying to put php in my database so that I can pull php scripts from my database. Is it possible to do this?

Example... when I add <font color="green">This is a test</font> to a table in my database, the website pulls it just fine. However, if I put echo "This is a test"; in my database it will not pull it.

I need to put php inside my database

php HAS to be parsed through the interpreter, read up on the eval() function.

In order to parse stored php code, you would need to run it as a string through the eval() function. This site stores the templates files (including php) within a database.

Just a note about using eval:

Any output in eval'd code will have no effect. For example:

PHP Code:

$code = 'echo "hello world";';
eval($code); 


The above code will have no output. If you want your eval'd code to have output you'll need to capture it manually using the output control functions:

PHP Code:

$code = 'echo "hello world";';
$pre = 'ob_start();';
$post = '$myOutput = ob_get_clean();';
eval($pre . $code . $post);
echo $myOutput; 


In the above code we use an output buffer to capture the output of the code and store it in the variable $myOutput. Since variables persist after the code is evaluated we can then echo $myOutput outside of the eval statement.

Another note: your eval'd code should not begin with an opening tag (<?php).

I'm surprised that nobody told it sooner, but please, don't do that.
It's simply asking for troubles.

It's wastful on the resources. Each eval is like launching another PHP instance, with a new context, and context switching IS costly.

It's slow, because for each block of code, you have to make a call to the db. A db call (even for a small set of datas) is around 150 times slower than reading a file.
You will spend most of the time waiting for the db resultset and eval()'uating your content...

It's very, very difficult to debug and extremly prone to side effects.

If you are not very careful upon sql injection, it's a big door widely open, with tracking light and a flag saying "hackers welcome" and "please hit me real hard !"

Hi.
I think you can get what you want here.
http://www.scriptsearch.com/details/10415.html

Why would you put PHP code in MySQL, why not just have a libary of PHP scripts in a folder and call them as includes into your page as needed (that's usually what people do).

use the bbcode

Slow or not you can get around MOST mysql injection attacks by putting your query through mysql_real_escape_string or the improved mysqli_real_escape_string

If you're allowing user input like this and it's not just a private system for yourself (that's locked away) there's a whole lot more to check for like to make sure they're input isn't linking to malicious sites via hidden iframes or whatever they might do. Doing so they could attack your website visitors using your website to do it.