3v4l.org

run code in 500+ PHP versions simultaneously
<?php @mkdir("/tmp/t/a/b/c",0777,true); file_put_contents("/tmp/t/a/b/b.php","MARKER"); $prefix="/tmp/t/a/b/c/x-"; $p1=$prefix."../../b".".php"; var_dump($p1, file_exists($p1), realpath($p1)); $p2=$prefix."..%2F..%2Fb.php"; var_dump(file_exists("/tmp/t/a/b/c/x-".chr(0)));
Output for 8.2.31 - 8.2.33, 8.3.0 - 8.3.33, 8.4.1 - 8.4.25, 8.5.0 - 8.5.10
string(26) "/tmp/t/a/b/c/x-../../b.php" bool(false) bool(false) bool(false)
preferences:
44.13 ms | 791 KiB | 4 Q