Get rid of php filter requirement?

Problem/Motivation

PHP filter is a security problem and many sites won't want to turn on that module.

Proposed resolution

Find and fix each time we use it:
complicated- views header
done- autonodetitle

Remaining tasks

Redo the views headers, which have to be live php (they depend on the logged-in user).

Possible Approaches:
views_alter hooks?
using php to call the view, so alterations can be made, rather than just importing the view.
preprocess?