<?php
//$search = htmlentities($_GET['search']);
$search="phpinfo()/*|apple/e\x00";
if (strpos($search, 'apple') !== false){
echo preg_replace("/".$search."/", $search, "apple");
}elseif (strpos($search, 'orange') !== false){
echo preg_replace("/".$search."/", $search." <img src='".$search.".png'>", "orange");
}elseif (strpos($search, 'banana') !== false){
echo preg_replace("/".$search."/", $search." <img src='".$search.".png'>", "banana");
}elseif (strpos($search, 'kiwi') !== false){
echo preg_replace("/".$search."/", $search." <img src='".$search.".png'>", "kiwi");
}else echo "Please search for apple, orange, banana, or kiwi.";
preferences:
36.91 ms | 402 KiB | 5 Q