3v4l.org

run code in 300+ PHP versions simultaneously

@ 2018-07-17T02:32:05Z

<?php

// uncomment these to see what happens in different situations.
// note that this only handles file security; it DOES NOT stop me from reading your files, or vice-versa.

$_GET = ['user' => '__adrian', 'file' => 'foo.txt'];
//$_GET = ['user' => '__adrian', 'file' => 'remote-file-inclusion.exe'];
//$_GET = ['user' => 'UnicornTek', 'file' => 'filesystems-tutorial.pdf'];
//$_GET = ['user' => 'UnicornTek', 'file' => 'bar.txt'];


$allowed_files = [
    '__adrian' => [
        'foo.txt',
        'bar.png'
    ],
    'UnicornTek' => [
        'filesystems-turoial.pdf',
        'remote-file-inclusion.exe'
    ]
];

if (! isset($allowed_files[$_GET['user']]) || ! in_array($_GET['file'], $allowed_files[$_GET['user']])) {
    throw new Exception("File Not Found: {$_GET['user']}/{$_GET['file']}");
}

readfile("/path/to/users/{$_GET['user']}/{$_GET['file']}");

Output for git.master_jit, git.master, rfc.property-hooks: Warning: readfile(): open_basedir restriction in effect. File(/path/to/users/__adrian/foo.txt) is not within the allowed path(s): (/tmp:/in:/etc) in /in/1bm4p on line 27 Warning: readfile(/path/to/users/__adrian/foo.txt): Failed to open stream: Operation not permitted in /in/1bm4p on line 27

This tab shows result from various feature-branches currently under review by the php developers. Contact me to have additional branches featured.

Active branches

Archived branches

Once feature-branches are merged or declined, they are no longer available. Their functionality (when merged) can be viewed from the main output page

2020-03-21 RFC: Is_Literal - declined
2020-12-04 Enumerations - included in PHP 8.1
2018-06-15 Typed Properties v2 - implemented in PHP 7.4
2016-08-12 Object typehint - included in PHP 7.2
2016-08-14 Arrow functions - withdrawn
2016-05-29 array_change_keys() - withdrawn
2016-04-19 Lexical scope support for anonymous classes - suspended
2016-04-17 Functional Interfaces - declined
2016-03-16 Typed Properties - superseded in favor of Typed Properties 2.0
2015-08-27 Callable Prototypes - declined
2015-05-01 Short Closures - declined / withdrawn in favor of Arrow Functions
2015-02-18 Scalar type hints v5 - included in PHP 7
2015-02-14 Union Types - declined
2013-09-22 Anonymous classes - included in PHP 7

preferences:dark modelive preview

71.98 ms | 406 KiB | 5 Q