<?php
$xml = <<<EOT
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE test [<!ENTITY xxe SYSTEM "http://exploited.cz/robots.txt">]>
<foo>&xxe;</foo>
EOT;
libxml_disable_entity_loader(false);
$x = simplexml_load_string($xml);
// $x = simplexml_load_string($xml, null, LIBXML_NOENT);
var_dump((string)$x);
- Output for 8.0.0 - 8.0.30, 8.1.0 - 8.1.28, 8.2.0 - 8.2.18, 8.3.0 - 8.3.6
- Deprecated: Function libxml_disable_entity_loader() is deprecated in /in/1jYq4 on line 7
string(0) ""
- Output for 5.2.11 - 5.2.17, 5.3.0 - 5.3.29, 5.4.0 - 5.4.45, 5.5.0 - 5.5.36, 5.6.0 - 5.6.28, 7.0.0 - 7.0.20, 7.1.0 - 7.1.25, 7.2.0 - 7.2.33, 7.3.0 - 7.3.33, 7.4.0 - 7.4.33
- string(0) ""
- Output for 5.0.0 - 5.0.5, 5.1.0 - 5.1.1, 5.1.3 - 5.1.6, 5.2.0 - 5.2.10
- Fatal error: Call to undefined function libxml_disable_entity_loader() in /in/1jYq4 on line 7
Process exited with code 255. - Output for 5.1.2
- Fatal error: Call to undefined function libxml_disable_entity_loader() in /in/1jYq4 on line 8
Process exited with code 255. - Output for 4.4.5 - 4.4.9
- Fatal error: Call to undefined function: libxml_disable_entity_loader() in /in/1jYq4 on line 7
Process exited with code 255. - Output for 4.3.2 - 4.3.11, 4.4.0 - 4.4.1, 4.4.3 - 4.4.4
- Fatal error: Call to undefined function: libxml_disable_entity_loader() in /in/1jYq4 on line 7
Process exited with code 255. - Output for 4.4.2
- Fatal error: Call to undefined function: libxml_disable_entity_loader() in /in/1jYq4 on line 8
Process exited with code 255. - Output for 4.3.0 - 4.3.1
- Fatal error: Call to undefined function: libxml_disable_entity_loader() in /in/1jYq4 on line 7
preferences:
293.28 ms | 401 KiB | 363 Q