3v4l.org

run code in 200+ php & hhvm versions
Bugs & Features
<?php $buffer = <<<XML <?xml version="1.0"?> <!DOCTYPE foo [ <!ELEMENT foo ANY > <!ENTITY xxe SYSTEM "data://text/html,aaaa" >]><foo>&xxe;</foo> XML; //libxml_disable_entity_loader(false); $xml = simplexml_load_string($buffer); var_dump($xml); echo "trying New SimpleXMLElement($xml)"; $xml = new SimpleXMLElement($buffer); var_dump($xml); echo 'Enabling LIBXML_NOENT for test reasons'; $xml = simplexml_load_string($buffer, 'SimpleXMLElement', LIBXML_NOENT); var_dump($xml);
based on B0q59
Output for 5.3.6 - 5.3.29, 5.4.28 - 5.4.45, 5.5.12 - 5.6.30, 7.0.0 - 7.2.6
object(SimpleXMLElement)#1 (1) { ["xxe"]=> object(SimpleXMLElement)#2 (1) { ["xxe"]=> object(SimpleXMLElement)#3 (0) { } } } trying New SimpleXMLElement()object(SimpleXMLElement)#2 (1) { ["xxe"]=> object(SimpleXMLElement)#1 (1) { ["xxe"]=> object(SimpleXMLElement)#3 (0) { } } } Enabling LIBXML_NOENT for test reasonsobject(SimpleXMLElement)#1 (1) { [0]=> string(4) "aaaa" }
Output for hhvm-3.12.14 - 3.17.3
object(SimpleXMLElement)#1 (1) { ["xxe"]=> object(SimpleXMLElement)#2 (1) { ["xxe"]=> object(SimpleXMLElement)#3 (0) { } } } trying New SimpleXMLElement()object(SimpleXMLElement)#2 (1) { ["xxe"]=> object(SimpleXMLElement)#3 (1) { ["xxe"]=> object(SimpleXMLElement)#4 (0) { } } } Enabling LIBXML_NOENT for test reasonsobject(SimpleXMLElement)#3 (1) { [0]=> string(4) "aaaa" }
Output for hhvm-3.10.1 - 3.11.1
object(SimpleXMLElement)#1 (1) { ["xxe"]=> object(SimpleXMLElement)#2 (1) { ["xxe"]=> object(SimpleXMLElement)#3 (0) { } } } trying New SimpleXMLElement()object(SimpleXMLElement)#2 (1) { ["xxe"]=> object(SimpleXMLElement)#3 (1) { ["xxe"]=> object(SimpleXMLElement)#4 (0) { } } } Enabling LIBXML_NOENT for test reasonsobject(SimpleXMLElement)#3 (0) { }
Output for 5.4.0 - 5.4.27, 5.5.0 - 5.5.11
object(SimpleXMLElement)#1 (1) { ["xxe"]=> object(SimpleXMLElement)#2 (1) { ["xxe"]=> object(SimpleXMLElement)#3 (0) { } } } trying New SimpleXMLElement()object(SimpleXMLElement)#2 (1) { ["xxe"]=> object(SimpleXMLElement)#1 (1) { ["xxe"]=> object(SimpleXMLElement)#3 (0) { } } } Enabling LIBXML_NOENT for test reasonsobject(SimpleXMLElement)#1 (0) { }
Output for 5.1.2 - 5.3.5
object(SimpleXMLElement)#1 (1) { ["xxe"]=> object(SimpleXMLElement)#2 (1) { ["xxe"]=>
Process exited with code 139.
Output for 5.1.0 - 5.1.1
object(SimpleXMLElement)#1 (1) { ["xxe"]=> object(SimpleXMLElement)#2 (1) { ["xxe"]=> object(SimpleXMLElement)#3 (0) { } } } trying New SimpleXMLElement()object(SimpleXMLElement)#4 (1) { ["xxe"]=> object(SimpleXMLElement)#1 (1) { ["xxe"]=> object(SimpleXMLElement)#2 (0) { } } } Enabling LIBXML_NOENT for test reasons Notice: simplexml_load_string(): Unable to find the wrapper "data" - did you forget to enable it when you configured PHP? in /in/h7j67 on line 19 Warning: simplexml_load_string(): I/O warning : failed to load external entity "data://text/html,aaaa" in /in/h7j67 on line 19 Warning: simplexml_load_string(): Entity: line 4: parser error : Failure to process entity xxe in /in/h7j67 on line 19 Warning: simplexml_load_string(): <!ENTITY xxe SYSTEM "data://text/html,aaaa" >]><foo>&xxe;</foo> in /in/h7j67 on line 19 Warning: simplexml_load_string(): ^ in /in/h7j67 on line 19 Warning: simplexml_load_string(): Entity: line 4: parser error : Entity 'xxe' not defined in /in/h7j67 on line 19 Warning: simplexml_load_string(): <!ENTITY xxe SYSTEM "data://text/html,aaaa" >]><foo>&xxe;</foo> in /in/h7j67 on line 19 Warning: simplexml_load_string(): ^ in /in/h7j67 on line 19 bool(false)
Output for 5.0.0 - 5.0.5
object(SimpleXMLElement)#1 (1) { ["xxe"]=> object(SimpleXMLElement)#2 (1) { ["xxe"]=> object(SimpleXMLElement)#3 (0) { } } } trying New SimpleXMLElement()object(SimpleXMLElement)#4 (1) { ["xxe"]=> object(SimpleXMLElement)#1 (1) { ["xxe"]=> object(SimpleXMLElement)#2 (0) { } } } Enabling LIBXML_NOENT for test reasons Notice: Use of undefined constant LIBXML_NOENT - assumed 'LIBXML_NOENT' in /in/h7j67 on line 19 Warning: simplexml_load_string() expects at most 2 parameters, 3 given in /in/h7j67 on line 19 NULL
Output for 4.4.5 - 4.4.9
Fatal error: Call to undefined function: simplexml_load_string() in /in/h7j67 on line 12
Process exited with code 255.
Output for 4.3.2 - 4.4.1, 4.4.3 - 4.4.4
Fatal error: Call to undefined function: simplexml_load_string() in /in/h7j67 on line 12
Process exited with code 255.
Output for 4.4.2
Fatal error: Call to undefined function: simplexml_load_string() in /in/h7j67 on line 13
Process exited with code 255.
Output for 4.3.0 - 4.3.1
Fatal error: Call to undefined function: simplexml_load_string() in /in/h7j67 on line 12