entermix

$str = 'Текст, ещё текст ABCDEF ещё текст текст GHJKL -- много текста MNOP и напоследок снова ABCDEF конец';

$replaces = [['text' => 'ABCDEF', 'replace' => 'AAA', 'limit' => 1], ['text' => 'GHJKL', 'replace' => 'BBB'], ['text' => 'ABCDEF', 'replace' => 'CCC']];

foreach ($replaces as $replace){
	$str = preg_replace('#' . $replace['text'] . '#', $replace['replace'], $str, ($replace['limit'] ?? -1));
}

echo $str;

Я их не хочу оставлять в public, чтобы к ним не было прямого доступа из браузера.

Hi, did you found a solution for this problem?

upd:
Well, after hours of attempts I fixed it:
There could be few reasons:

Not enought permissions on operation folder (you need to put recousively 775 permission to make it work)

Check the owner and owner-group of this folder, maybe current user doesn't have permission to read/write in current folder, also could be fixed by providing extra permissions to folder (777)

Check your tmp folder, if it's also writable or not. In internet there are a lot of variants how to do it, in my case, I have just change path to tmp folder in vendor/phpoffice/phpword/src/Settings.php, function getTempDir(), I have hardcoded absolute path of current working directory and problem was gone. But probably it's not best idea.

if ($req[1]) $res['params']['lastname'] = $req[1]
if ($req[2]) $res['params']['firstname'] = $req[2]
if ($req[3]) $res['params']['secondname'] = $req[3]
if ($req[4]) $res['params']['birthdate'] = $req[4]
if ($req[5]) $res['params']['phone'] = $req[5]
if ($req[6]) $res['params']['email'] = $req[6]

$res['params'] = array_filter($res['params'], function($v) { return !is_null($v); });

Текстовые поля у меня фильтруются все на вводе

public static function limit_words($str, $limit = 100, $end_char = NULL)
	{
		$limit = (int) $limit;
		$end_char = ($end_char === NULL) ? '…' : $end_char;

		if (trim($str) === '')
			return $str;

		if ($limit <= 0)
			return $end_char;

		preg_match('/^\s*+(?:\S++\s*+){1,'.$limit.'}/u', $str, $matches);

		// Only attach the end character if the matched string is shorter
		// than the starting string.
		return rtrim($matches[0]).((strlen($matches[0]) === strlen($str)) ? '' : $end_char);
	}

$request = "UPDATE products SET name = '$name', description = '$description', parameters = '$parameters', manufacturer = '$manufacturer', cost = '$cost' WHERE article = $article";

$request = "UPDATE products SET name = '$name', description = '$description', parameters = '$parameters', manufacturer = '$manufacturer', cost = '$cost' WHERE article = '$article'";

error_reporting(E_ALL);
ini_set('display_startup_errors', 1);
ini_set('display_errors', '1');

1. Просим пользователя авторизоваться через соц. сеть и запоминаем его ID
   
2. Просим пользователя выполнить действие (подписка на канал)
   
3. Проверяем наличие подписчика с ID, который получили в первом пункте при помощи API и активируем услугу, в случае успеха.