3v4l.org

run code in 300+ PHP versions simultaneously
<?php $_GET['search'] = "' onclick='alert(1337)"; ?> <input name=search value='<?= htmlspecialchars($_GET['search']); ?>'>
Output for 8.1.0 - 8.1.34, 8.2.0 - 8.2.30, 8.3.0 - 8.3.30, 8.4.1 - 8.4.18, 8.5.0 - 8.5.3
<input name=search value='&#039; onclick=&#039;alert(1337)'>
Output for 7.4.0 - 7.4.33, 8.0.1 - 8.0.30
<input name=search value='' onclick='alert(1337)'>
preferences:
85.97 ms | 1248 KiB | 4 Q