Convert SQL Parameter (SQL inside Variable)

convert_sqlpara.php

  <?php 
  function ConvertSqlPara($sql, $data) {
    $start = strpos($sql, '{$');
    $i=0;
    while ($start>-1) {
        $end = strpos($sql, '}', $start);
        if($i++>20) {return $sql ;}
        if ($end > $start) {
            $filed = substr($sql, $start + 2, $end - $start - 2);
            $var=array('','');
            $var = explode(',', $filed);
            if(isset($var[1]) && $var[1]=='ENC'){
                $sql = substr($sql, 0, $start) . $encryption->encode($data[$var[0]]) . substr($sql, $end + 1); //encrypted ID
            }else {
                $sql = substr($sql, 0, $start) . $data[$var[0]] . substr($sql, $end + 1);
            }
        }
        $start = strpos($sql, '{$');
    }
    return trim($sql);
  }

/**
** example 
** SQL: SELECT USER_LOGIN_ID as ID,UPDATED_DATE, UPDATED_BY FROM USER_INFO WHERE UPDATED_BY={$user_id}
** Data: array('user_id' => 5)
**/