3v4l.org

run code in 150+ php & hhvm versions
Bugs & Features
<?php $sanitizedUsername = '\"ls ."'; exec("sh /tmp/$sanitizedUsername ftp://username:password@serverAddress/var/www/$sanitizedUsername");
Output for 4.3.0, 5.4.39 - 5.6.28, hhvm-3.10.0 - 3.12.0, 7.0.0 - 7.1.0
Output for 4.3.1 - 5.4.38
sh: 0: Can't open /tmp/"ls