3v4l.org

run code in 300+ PHP versions simultaneously
<?php $_GET['search'] = "' onclick='alert(1337)"; ?> <input name=search value='<?= htmlspecialchars($_GET['search']); ?>'>
Output for 8.1.0 - 8.1.7
<input name=search value='&#039; onclick=&#039;alert(1337)'>
Output for 7.4.0 - 7.4.30, 8.0.1 - 8.0.20
<input name=search value='' onclick='alert(1337)'>

preferences:
27.66 ms | 410 KiB | 5 Q