3v4l.org

run code in 200+ php & hhvm versions
Bugs & Features
<?php $argv = array(null, "' OR 1=1--", 'root'); echo "<!doctype html>\n"; $username = @$_GET['username'] ? $_GET['username'] : $argv[1]; $password = @$_GET['password'] ? $_GET['password'] : $argv[2]; $password = md5($password); $pdo = new PDO('sqlite::memory:'); $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); $pdo->exec("DROP TABLE IF EXISTS users"); $pdo->exec("CREATE TABLE users (username VARCHAR(255), password VARCHAR(255))"); $rootPassword = md5("secret"); $pdo->exec("INSERT INTO users (username, password) VALUES ('root', '$rootPassword');"); echo $q = "SELECT * FROM users WHERE username = ? AND password = ?"; $statement = $pdo->prepare($q); $statement->execute(array($username, $password)); if (count($statement->fetchAll())) { echo "<br>\nAccess granted to $username!<br>\n"; } else { echo "<br>\nAccess denied for $username!<br>\n"; }
based on 11B43
Output for 5.2.0 - 7.2.0
<!doctype html> SELECT * FROM users WHERE username = ? AND password = ?<br> Access denied for ' OR 1=1--!<br>
Output for 5.1.4 - 5.1.6
<!doctype html> Fatal error: Uncaught exception 'PDOException' with message 'could not find driver' in /in/UeV4s:7 Stack trace: #0 /in/UeV4s(7): PDO->__construct('sqlite::memory:') #1 {main} thrown in /in/UeV4s on line 7
Process exited with code 255.
Output for 5.1.0 - 5.1.3
<!doctype html> Fatal error: Uncaught exception 'PDOException' with message 'SQLSTATE[HY000]: General error: 1 near "EXISTS": syntax error' in /in/UeV4s:9 Stack trace: #0 /in/UeV4s(9): PDO->exec('DROP TABLE IF E...') #1 {main} thrown in /in/UeV4s on line 9
Process exited with code 255.
Output for 5.0.0 - 5.0.5
<!doctype html> Fatal error: Class 'PDO' not found in /in/UeV4s on line 7
Process exited with code 255.
Output for 4.4.2 - 4.4.9
Parse error: syntax error, unexpected ',', expecting '(' in /in/UeV4s on line 8
Process exited with code 255.
Output for 4.3.0 - 4.3.1, 4.3.5 - 4.4.1
Parse error: parse error, unexpected ',', expecting '(' in /in/UeV4s on line 8
Process exited with code 255.
Output for 4.3.2 - 4.3.4
Parse error: parse error, expecting `'('' in /in/UeV4s on line 8
Process exited with code 255.