3v4l.org

run code in 300+ PHP versions simultaneously
<?php $sanitizedUsername = '\\0'; exec("ssh /tmp/$sanitizedUsername ftp://username:password@serverAddress/var/www/$sanitizedUsername");
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/7q56p
function name:  (null)
number of ops:  9
compiled vars:  !0 = $sanitizedUsername
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    2     0  E >   ASSIGN                                                   !0, '%5C0'
    4     1        INIT_FCALL                                               'exec'
          2        ROPE_INIT                                     4  ~3      'ssh+%2Ftmp%2F'
          3        ROPE_ADD                                      1  ~3      ~3, !0
          4        ROPE_ADD                                      2  ~3      ~3, '+ftp%3A%2F%2Fusername%3Apassword%40serverAddress%2Fvar%2Fwww%2F'
          5        ROPE_END                                      3  ~2      ~3, !0
          6        SEND_VAL                                                 ~2
          7        DO_ICALL                                                 
          8      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
150.14 ms | 1393 KiB | 15 Q