3v4l.org

run code in 300+ PHP versions simultaneously
<?php class foo { public function __wakeup() { echo 'exploited'; } } $userInput = serialize(new foo); echo $userInput; $serialisedStr = serialize([ $userInput, ]); unserialize($serialisedStr);
Output for git.master, git.master_jit, rfc.property-hooks
O:3:"foo":0:{}

This tab shows result from various feature-branches currently under review by the php developers. Contact me to have additional branches featured.

Active branches

Archived branches

Once feature-branches are merged or declined, they are no longer available. Their functionality (when merged) can be viewed from the main output page

preferences:
50.67 ms | 401 KiB | 8 Q