Online PHP editor | output for UFqfm

@ 2016-02-13T03:33:08Z

<?php

function lfi_be_gone($userProvided, $basePath)
{
    $real = realpath($userProvided);
    if ($real === false) {
        throw new Exception('LOL NOPE');
    }
    
    if (strpos($real, $basePath) !== 0) {
        throw new Exception('LOL NOPE');
    }
    
    return $real;
}

# Usage:

$userProvidedVariable = '../../../../../../../../etc/passwd';

require_once lfi_be_gone("includes/" . $userProvidedVariable, $_SERVER['DOCUMENT_ROOT'] . '/includes/');

Output for 7.0.0 - 7.0.33, 7.1.0 - 7.1.33, 7.2.0 - 7.2.33, 7.3.0 - 7.3.33, 7.4.0 - 7.4.33, 8.0.0 - 8.0.30, 8.1.0 - 8.1.28, 8.2.0 - 8.2.18, 8.3.0 - 8.3.6: Fatal error: Uncaught Exception: LOL NOPE in /in/UFqfm:7 Stack trace: #0 /in/UFqfm(21): lfi_be_gone('includes/../../...', '/includes/') #1 {main} thrown in /in/UFqfm on line 7
Process exited with code 255.
Output for 5.5.0 - 5.5.38, 5.6.0 - 5.6.40: Fatal error: Uncaught exception 'Exception' with message 'LOL NOPE' in /in/UFqfm:7 Stack trace: #0 /in/UFqfm(21): lfi_be_gone('includes/../../...', '/includes/') #1 {main} thrown in /in/UFqfm on line 7
Process exited with code 255.

preferences:dark modelive preview