<form action="" method="GET">
<input type="text" name="search" value="phpinfo()/e%00#apple">
<input type="submit" name="submit" value="Search">
</form><br />
<?php
if (isset($_GET['search'])){
$search = htmlentities($_GET['search']);
if (strpos($search, 'apple') !== false){
echo preg_replace("/".$search."/", $search." <img src='".$search.".png'>", "apple"); }elseif (strpos($search, 'orange') !== false){ echo preg_replace("/".$search."/", $search." <img src='".$search.".png'>", "orange"); }elseif (strpos($search, 'banana') !== false){ echo preg_replace("/".$search."/", $search." <img src='".$search.".png'>", "banana"); }elseif (strpos($search, 'kiwi') !== false){ echo preg_replace("/".$search."/", $search." <img src='".$search.".png'>", "kiwi"); }else echo "Please search for apple, orange, banana, or kiwi.";}?>
preferences:
42.4 ms | 402 KiB | 5 Q