3v4l.org

run code in 300+ PHP versions simultaneously
<?php // --taint-analysis $foo = "foo' union all select * from secrets where '1' = '1"; $sql = "SELECT * from example_table WHERE foobar = '$foo'"; echo $sql;
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/0BFcB
function name:  (null)
number of ops:  7
compiled vars:  !0 = $foo, !1 = $sql
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    3     0  E >   ASSIGN                                                   !0, 'foo%27+union+all+select+%2A+from+secrets+where+%271%27+%3D+%271'
    5     1        ROPE_INIT                                     3  ~4      'SELECT+%2A+from+example_table+WHERE+foobar+%3D+%27'
          2        ROPE_ADD                                      1  ~4      ~4, !0
          3        ROPE_END                                      2  ~3      ~4, '%27'
          4        ASSIGN                                                   !1, ~3
    6     5        ECHO                                                     !1
    7     6      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
237.15 ms | 997 KiB | 13 Q