3v4l.org

run code in 300+ PHP versions simultaneously
<?php $_GET['search'] = "' onclick='alert(1337)"; ?> <input name=search value='<?= htmlspecialchars($_GET['search']); ?>'>
Output for 8.1.0 - 8.1.31, 8.2.0 - 8.2.26, 8.3.0 - 8.3.15, 8.4.1 - 8.4.2
<input name=search value='&#039; onclick=&#039;alert(1337)'>
Output for 7.4.0 - 7.4.33, 8.0.1 - 8.0.30
<input name=search value='' onclick='alert(1337)'>
preferences:
88.49 ms | 407 KiB | 5 Q