<?php
//$search = htmlentities($_GET['search']);
$search=htmlentities("phpinfo()|apple/e\x00");
echo $search;
if (strpos($search, 'apple') !== false){
echo preg_replace("/".$search."/", $search." <img src='".$search.".png'>", "apple"); }
// elseif (strpos($search, 'orange') !== false){
// echo preg_replace("/".$search."/", $search." <img src='".$search.".png'>", "orange");
// }elseif (strpos($search, 'banana') !== false){
// echo preg_replace("/".$search."/", $search." <img src='".$search.".png'>", "banana");
// }elseif (strpos($search, 'kiwi') !== false){
// echo preg_replace("/".$search."/", $search." <img src='".$search.".png'>", "kiwi");}
else echo "Don't work.";?>
preferences:
30.18 ms | 402 KiB | 5 Q