<?php
$xml = <<<XML
<?xml version='1.0' encoding='UTF-8' ?>
<!DOCTYPE note [
<!ENTITY company "Example Corp">
<!ENTITY company2 "Example Corp222">
<!ENTITY test SYSTEM "file:///etc/passwd">
<!ENTITY xxe SYSTEM "expect://">
]>
<note>
<to>__&test;__</to>
<from>Jani</from>
<heading>Reminder</heading>
<body>Don't forget me this weekend!</body>
</note>
XML;
//libxml_disable_entity_loader(true);
$dom = simplexml_load_string($xml, null);
print_r($dom);
- Output for 7.3.0 - 7.3.33, 7.4.0 - 7.4.33, 8.0.0 - 8.0.30, 8.1.0 - 8.1.33, 8.2.0 - 8.2.29, 8.3.0 - 8.3.25, 8.4.1 - 8.4.12
- SimpleXMLElement Object
(
[to] => ____
[from] => Jani
[heading] => Reminder
[body] => Don't forget me this weekend!
)
- Output for 5.4.0 - 5.4.45, 5.5.0 - 5.5.38, 5.6.0 - 5.6.40, 7.0.0 - 7.0.33, 7.1.0 - 7.1.33, 7.2.0 - 7.2.34
- Parse error: syntax error, unexpected end of file in /in/ieam1 on line 23
Process exited with code 255. - Output for 4.4.2 - 4.4.9, 5.1.0 - 5.1.6, 5.2.0 - 5.2.17, 5.3.0 - 5.3.29
- Parse error: syntax error, unexpected $end in /in/ieam1 on line 23
Process exited with code 255. - Output for 4.3.0 - 4.3.1, 4.3.5 - 4.3.11, 4.4.0 - 4.4.1, 5.0.0 - 5.0.5
- Parse error: parse error, unexpected $ in /in/ieam1 on line 23
Process exited with code 255. - Output for 4.3.2 - 4.3.4
- Parse error: parse error in /in/ieam1 on line 23
Process exited with code 255.
preferences:
192.87 ms | 411 KiB | 5 Q