3v4l.org

run code in 300+ PHP versions simultaneously
<?php $str = 'O:12:"DateTimeZone":2:{s:13:"timezone_type";i:3;s:8:"timezone";s:29:"<script>alert(/xss/)</script>";}'; unserialize($str);
Output for git.master, git.master_jit
Warning: DateTimeZone::__unserialize(): Unknown or bad timezone (<script>alert(/xss/)</script>) in /in/VDMDe on line 4 Fatal error: Uncaught Error: Invalid serialization data for DateTimeZone object in /in/VDMDe:4 Stack trace: #0 [internal function]: DateTimeZone->__unserialize(Array) #1 /in/VDMDe(4): unserialize('O:12:"DateTimeZ...') #2 {main} thrown in /in/VDMDe on line 4
Process exited with code 255.
Output for rfc.property-hooks
Fatal error: Uncaught Error: Invalid serialization data for DateTimeZone object in /in/VDMDe:4 Stack trace: #0 [internal function]: DateTimeZone->__unserialize(Array) #1 /in/VDMDe(4): unserialize('O:12:"DateTimeZ...') #2 {main} thrown in /in/VDMDe on line 4
Process exited with code 255.

This tab shows result from various feature-branches currently under review by the php developers. Contact me to have additional branches featured.

Active branches

Archived branches

Once feature-branches are merged or declined, they are no longer available. Their functionality (when merged) can be viewed from the main output page


preferences:
42.53 ms | 401 KiB | 8 Q