The Rules block visibility module is another alternative available ... which doesn't require the PHP filter to be enabled. Here is a quote from its project page:
The Rules block visibility module allows Rules components to be used to control block visibility. This provides Drupal administrators and developers extreme flexibility in controlling when blocks should be displayed on their websites, in addition to the default visibility options provided by Drupal.
The general idea is that if you can do it with Rules, you can use it to control block visibility, so the possibilities are limitless.
Need to show a block only for users registered more than a month ago?
Perhaps you have a block that must be shown only between 8am-5pm on weekdays?
What about displaying or hiding a block based on current weather conditions?
All of this can be done by using Rules block visibility.
Moreover, as per the "if you can do it with Rules, you can use it to control block visibility" above, you have the power of Rules available to implement all sorts of custom logic (cfr. the "programmatically / custom module" part of your question).
For an illustration of how to use this module, refer to my answer to "http"https://drupal.stackexchange.com/questions/109984/how-to-stop-a-views-block-from-displaying-to-admins-such-as-user-1/193173#193173".