3v4l.org

run code in 300+ PHP versions simultaneously
<?php echo "<!doctype html>\n"; $username = @$_GET['username'] ? $_GET['username'] : $argv[1]; $password = @$_GET['password'] ? $_GET['password'] : $argv[2]; $password = md5($password); $pdo = new PDO('sqlite::memory:'); $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); $pdo->exec("DROP TABLE IF EXISTS users"); $pdo->exec("CREATE TABLE users (username VARCHAR(255), password VARCHAR(255))"); $rootPassword = md5("secret"); $pdo->exec("INSERT INTO users (username, password) VALUES ('root', '$rootPassword');"); $statement = $pdo->query("SELECT * FROM users WHERE username = '$username' AND password = '$password'"); if (count($statement->fetchAll())) { echo "Access granted to $username!<br>\n"; } else { echo "Access denied for $username!<br>\n"; }
Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 43) Position 1 = 6, Position 2 = 10
Branch analysis from position: 6
1 jumps found. (Code = 42) Position 1 = 12
Branch analysis from position: 12
2 jumps found. (Code = 43) Position 1 = 18, Position 2 = 22
Branch analysis from position: 18
1 jumps found. (Code = 42) Position 1 = 24
Branch analysis from position: 24
2 jumps found. (Code = 43) Position 1 = 66, Position 2 = 71
Branch analysis from position: 66
1 jumps found. (Code = 42) Position 1 = 75
Branch analysis from position: 75
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 71
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 22
2 jumps found. (Code = 43) Position 1 = 66, Position 2 = 71
Branch analysis from position: 66
Branch analysis from position: 71
Branch analysis from position: 10
2 jumps found. (Code = 43) Position 1 = 18, Position 2 = 22
Branch analysis from position: 18
Branch analysis from position: 22
filename:       /in/4aVIq
function name:  (null)
number of ops:  76
compiled vars:  !0 = $username, !1 = $argv, !2 = $password, !3 = $pdo, !4 = $rootPassword, !5 = $statement
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    3     0  E >   ECHO                                                     '%3C%21doctype+html%3E%0A'
    4     1        BEGIN_SILENCE                                    ~6      
          2        FETCH_R                      global              ~7      '_GET'
          3        FETCH_DIM_R                                      ~8      ~7, 'username'
          4        END_SILENCE                                              ~6
          5      > JMPZ                                                     ~8, ->10
          6    >   FETCH_R                      global              ~9      '_GET'
          7        FETCH_DIM_R                                      ~10     ~9, 'username'
          8        QM_ASSIGN                                        ~11     ~10
          9      > JMP                                                      ->12
         10    >   FETCH_DIM_R                                      ~12     !1, 1
         11        QM_ASSIGN                                        ~11     ~12
         12    >   ASSIGN                                                   !0, ~11
    5    13        BEGIN_SILENCE                                    ~14     
         14        FETCH_R                      global              ~15     '_GET'
         15        FETCH_DIM_R                                      ~16     ~15, 'password'
         16        END_SILENCE                                              ~14
         17      > JMPZ                                                     ~16, ->22
         18    >   FETCH_R                      global              ~17     '_GET'
         19        FETCH_DIM_R                                      ~18     ~17, 'password'
         20        QM_ASSIGN                                        ~19     ~18
         21      > JMP                                                      ->24
         22    >   FETCH_DIM_R                                      ~20     !1, 2
         23        QM_ASSIGN                                        ~19     ~20
         24    >   ASSIGN                                                   !2, ~19
    6    25        INIT_FCALL                                               'md5'
         26        SEND_VAR                                                 !2
         27        DO_ICALL                                         $22     
         28        ASSIGN                                                   !2, $22
    7    29        NEW                                              $24     'PDO'
         30        SEND_VAL_EX                                              'sqlite%3A%3Amemory%3A'
         31        DO_FCALL                                      0          
         32        ASSIGN                                                   !3, $24
    8    33        INIT_METHOD_CALL                                         !3, 'setAttribute'
         34        SEND_VAL_EX                                              3
         35        SEND_VAL_EX                                              2
         36        DO_FCALL                                      0          
    9    37        INIT_METHOD_CALL                                         !3, 'exec'
         38        SEND_VAL_EX                                              'DROP+TABLE+IF+EXISTS+users'
         39        DO_FCALL                                      0          
   10    40        INIT_METHOD_CALL                                         !3, 'exec'
         41        SEND_VAL_EX                                              'CREATE+TABLE+users+%28username+VARCHAR%28255%29%2C+password+VARCHAR%28255%29%29'
         42        DO_FCALL                                      0          
   11    43        INIT_FCALL                                               'md5'
         44        SEND_VAL                                                 'secret'
         45        DO_ICALL                                         $30     
         46        ASSIGN                                                   !4, $30
   12    47        INIT_METHOD_CALL                                         !3, 'exec'
         48        ROPE_INIT                                     3  ~33     'INSERT+INTO+users+%28username%2C+password%29+VALUES+%28%27root%27%2C+%27'
         49        ROPE_ADD                                      1  ~33     ~33, !4
         50        ROPE_END                                      2  ~32     ~33, '%27%29%3B'
         51        SEND_VAL_EX                                              ~32
         52        DO_FCALL                                      0          
   13    53        INIT_METHOD_CALL                                         !3, 'query'
         54        ROPE_INIT                                     5  ~37     'SELECT+%2A+FROM+users+WHERE+username+%3D+%27'
         55        ROPE_ADD                                      1  ~37     ~37, !0
         56        ROPE_ADD                                      2  ~37     ~37, '%27+AND+password+%3D+%27'
         57        ROPE_ADD                                      3  ~37     ~37, !2
         58        ROPE_END                                      4  ~36     ~37, '%27'
         59        SEND_VAL_EX                                              ~36
         60        DO_FCALL                                      0  $40     
         61        ASSIGN                                                   !5, $40
   14    62        INIT_METHOD_CALL                                         !5, 'fetchAll'
         63        DO_FCALL                                      0  $42     
         64        COUNT                                            ~43     $42
         65      > JMPZ                                                     ~43, ->71
   15    66    >   ROPE_INIT                                     3  ~45     'Access+granted+to+'
         67        ROPE_ADD                                      1  ~45     ~45, !0
         68        ROPE_END                                      2  ~44     ~45, '%21%3Cbr%3E%0A'
         69        ECHO                                                     ~44
         70      > JMP                                                      ->75
   17    71    >   ROPE_INIT                                     3  ~48     'Access+denied+for+'
         72        ROPE_ADD                                      1  ~48     ~48, !0
         73        ROPE_END                                      2  ~47     ~48, '%21%3Cbr%3E%0A'
         74        ECHO                                                     ~47
   18    75    > > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
163.22 ms | 1400 KiB | 15 Q