3v4l.org

run code in 300+ PHP versions simultaneously
<?php $allowed = array('txt', 'docx'); print "\n\$_REQUEST:"; var_dump($_REQUEST); //o$a="txt.$php"; //echo "test${a}test\n"; $zzfile = $_REQUEST['zzfile']; //$filename = basename($zzfile); $filename = $zzfile; print "\nfilename:\n"; var_dump($filename); if (preg_match('#\.(.+)$#', $filename, $matches) && isset($matches[1]) && !in_array($matches[1], $allowed)) die("Extension ${matches[1]} is not allowed!"); echo "\nmatches:"; var_dump($matches); preg_match('#.#', $filename, $met); print("\nmet:\n"); var_dump($met); if (strrpos($filename, '.') !== false) //zwraca od pierwszej kropki od prawej do konca + end $ext = substr($filename, strrpos($filename, '.')); else $ext = ''; $newfile = "flag$ext"; echo "Reading <strong>$newfile</strong>..."; // Hint: the flag is in flag.php echo '<pre>'; readfile($newfile); echo '</pre>'; ?>
Output for git.master, git.master_jit, rfc.property-hooks
Deprecated: Using ${var} in strings is deprecated, use {$var} instead in /in/OFXdL on line 13 $_REQUEST:array(0) { } Warning: Undefined array key "zzfile" in /in/OFXdL on line 7 filename: NULL Deprecated: preg_match(): Passing null to parameter #2 ($subject) of type string is deprecated in /in/OFXdL on line 12 matches:array(0) { } Deprecated: preg_match(): Passing null to parameter #2 ($subject) of type string is deprecated in /in/OFXdL on line 15 met: array(0) { } Deprecated: strrpos(): Passing null to parameter #1 ($haystack) of type string is deprecated in /in/OFXdL on line 18 Reading <strong>flag</strong>...<pre> Warning: readfile(): open_basedir restriction in effect. File(flag) is not within the allowed path(s): (/tmp:/in:/etc) in /in/OFXdL on line 27 Warning: readfile(flag): Failed to open stream: Operation not permitted in /in/OFXdL on line 27 </pre>

This tab shows result from various feature-branches currently under review by the php developers. Contact me to have additional branches featured.

Active branches

Archived branches

Once feature-branches are merged or declined, they are no longer available. Their functionality (when merged) can be viewed from the main output page


preferences:
53.45 ms | 403 KiB | 8 Q