3v4l.org

run code in 300+ PHP versions simultaneously
<?php echo "<!doctype html>\n"; $username = @$_GET['username'] ? $_GET['username'] : @$argv[1]; $password = @$_GET['password'] ? $_GET['password'] : @$argv[2]; $password = md5($password); $pdo = new PDO('sqlite::memory:'); $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); $pdo->exec("DROP TABLE IF EXISTS users"); $pdo->exec("CREATE TABLE users (username VARCHAR(255), password VARCHAR(255))"); $rootPassword = md5("secret"); $pdo->exec("INSERT INTO users (username, password) VALUES ('root', '$rootPassword');"); $statement = $pdo->query("SELECT * FROM users WHERE username = '$username' AND password = '$password'"); if (count($statement->fetchAll())) { echo "Access granted to $username!<br>\n"; } else { echo "Access denied for $username!<br>\n"; }
Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 43) Position 1 = 6, Position 2 = 10
Branch analysis from position: 6
1 jumps found. (Code = 42) Position 1 = 14
Branch analysis from position: 14
2 jumps found. (Code = 43) Position 1 = 20, Position 2 = 24
Branch analysis from position: 20
1 jumps found. (Code = 42) Position 1 = 28
Branch analysis from position: 28
2 jumps found. (Code = 43) Position 1 = 70, Position 2 = 75
Branch analysis from position: 70
1 jumps found. (Code = 42) Position 1 = 79
Branch analysis from position: 79
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 75
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 24
2 jumps found. (Code = 43) Position 1 = 70, Position 2 = 75
Branch analysis from position: 70
Branch analysis from position: 75
Branch analysis from position: 10
2 jumps found. (Code = 43) Position 1 = 20, Position 2 = 24
Branch analysis from position: 20
Branch analysis from position: 24
filename:       /in/6rIhl
function name:  (null)
number of ops:  80
compiled vars:  !0 = $username, !1 = $argv, !2 = $password, !3 = $pdo, !4 = $rootPassword, !5 = $statement
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    3     0  E >   ECHO                                                     '%3C%21doctype+html%3E%0A'
    4     1        BEGIN_SILENCE                                    ~6      
          2        FETCH_R                      global              ~7      '_GET'
          3        FETCH_DIM_R                                      ~8      ~7, 'username'
          4        END_SILENCE                                              ~6
          5      > JMPZ                                                     ~8, ->10
          6    >   FETCH_R                      global              ~9      '_GET'
          7        FETCH_DIM_R                                      ~10     ~9, 'username'
          8        QM_ASSIGN                                        ~11     ~10
          9      > JMP                                                      ->14
         10    >   BEGIN_SILENCE                                    ~12     
         11        FETCH_DIM_R                                      ~13     !1, 1
         12        END_SILENCE                                              ~12
         13        QM_ASSIGN                                        ~11     ~13
         14    >   ASSIGN                                                   !0, ~11
    5    15        BEGIN_SILENCE                                    ~15     
         16        FETCH_R                      global              ~16     '_GET'
         17        FETCH_DIM_R                                      ~17     ~16, 'password'
         18        END_SILENCE                                              ~15
         19      > JMPZ                                                     ~17, ->24
         20    >   FETCH_R                      global              ~18     '_GET'
         21        FETCH_DIM_R                                      ~19     ~18, 'password'
         22        QM_ASSIGN                                        ~20     ~19
         23      > JMP                                                      ->28
         24    >   BEGIN_SILENCE                                    ~21     
         25        FETCH_DIM_R                                      ~22     !1, 2
         26        END_SILENCE                                              ~21
         27        QM_ASSIGN                                        ~20     ~22
         28    >   ASSIGN                                                   !2, ~20
    6    29        INIT_FCALL                                               'md5'
         30        SEND_VAR                                                 !2
         31        DO_ICALL                                         $24     
         32        ASSIGN                                                   !2, $24
    7    33        NEW                                              $26     'PDO'
         34        SEND_VAL_EX                                              'sqlite%3A%3Amemory%3A'
         35        DO_FCALL                                      0          
         36        ASSIGN                                                   !3, $26
    8    37        INIT_METHOD_CALL                                         !3, 'setAttribute'
         38        SEND_VAL_EX                                              3
         39        SEND_VAL_EX                                              2
         40        DO_FCALL                                      0          
    9    41        INIT_METHOD_CALL                                         !3, 'exec'
         42        SEND_VAL_EX                                              'DROP+TABLE+IF+EXISTS+users'
         43        DO_FCALL                                      0          
   10    44        INIT_METHOD_CALL                                         !3, 'exec'
         45        SEND_VAL_EX                                              'CREATE+TABLE+users+%28username+VARCHAR%28255%29%2C+password+VARCHAR%28255%29%29'
         46        DO_FCALL                                      0          
   11    47        INIT_FCALL                                               'md5'
         48        SEND_VAL                                                 'secret'
         49        DO_ICALL                                         $32     
         50        ASSIGN                                                   !4, $32
   12    51        INIT_METHOD_CALL                                         !3, 'exec'
         52        ROPE_INIT                                     3  ~35     'INSERT+INTO+users+%28username%2C+password%29+VALUES+%28%27root%27%2C+%27'
         53        ROPE_ADD                                      1  ~35     ~35, !4
         54        ROPE_END                                      2  ~34     ~35, '%27%29%3B'
         55        SEND_VAL_EX                                              ~34
         56        DO_FCALL                                      0          
   13    57        INIT_METHOD_CALL                                         !3, 'query'
         58        ROPE_INIT                                     5  ~39     'SELECT+%2A+FROM+users+WHERE+username+%3D+%27'
         59        ROPE_ADD                                      1  ~39     ~39, !0
         60        ROPE_ADD                                      2  ~39     ~39, '%27+AND+password+%3D+%27'
         61        ROPE_ADD                                      3  ~39     ~39, !2
         62        ROPE_END                                      4  ~38     ~39, '%27'
         63        SEND_VAL_EX                                              ~38
         64        DO_FCALL                                      0  $42     
         65        ASSIGN                                                   !5, $42
   14    66        INIT_METHOD_CALL                                         !5, 'fetchAll'
         67        DO_FCALL                                      0  $44     
         68        COUNT                                            ~45     $44
         69      > JMPZ                                                     ~45, ->75
   15    70    >   ROPE_INIT                                     3  ~47     'Access+granted+to+'
         71        ROPE_ADD                                      1  ~47     ~47, !0
         72        ROPE_END                                      2  ~46     ~47, '%21%3Cbr%3E%0A'
         73        ECHO                                                     ~46
         74      > JMP                                                      ->79
   17    75    >   ROPE_INIT                                     3  ~50     'Access+denied+for+'
         76        ROPE_ADD                                      1  ~50     ~50, !0
         77        ROPE_END                                      2  ~49     ~50, '%21%3Cbr%3E%0A'
         78        ECHO                                                     ~49
   18    79    > > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
166.96 ms | 1404 KiB | 15 Q