<?php $xml = <<<EOT <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE test [<!ENTITY xxe SYSTEM "http://exploited.cz/robots.txt">]> <foo>&xxe;</foo> EOT; libxml_disable_entity_loader(false); $x = simplexml_load_string($xml); // $x = simplexml_load_string($xml, null, LIBXML_NOENT); var_dump((string)$x);
You have javascript disabled. You will not be able to edit any code.