3v4l.org

run code in 300+ PHP versions simultaneously
<?php $username = '"; SELECT * FROM users; --'; $username = mysql_escape_string($username); $password = mysql_escape_string($password); $sql = "SELECT COUNT(*) FROM users WHERE username='$username' and password='$password'"; echo $sql;
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/9041p
function name:  (null)
number of ops:  17
compiled vars:  !0 = $username, !1 = $password, !2 = $sql
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    2     0  E >   ASSIGN                                                   !0, '%22%3B+SELECT+%2A+FROM+users%3B+--'
    3     1        INIT_FCALL_BY_NAME                                       'mysql_escape_string'
          2        SEND_VAR_EX                                              !0
          3        DO_FCALL                                      0  $4      
          4        ASSIGN                                                   !0, $4
    4     5        INIT_FCALL_BY_NAME                                       'mysql_escape_string'
          6        SEND_VAR_EX                                              !1
          7        DO_FCALL                                      0  $6      
          8        ASSIGN                                                   !1, $6
    6     9        ROPE_INIT                                     5  ~9      'SELECT+COUNT%28%2A%29+FROM+users+WHERE+username%3D%27'
         10        ROPE_ADD                                      1  ~9      ~9, !0
         11        ROPE_ADD                                      2  ~9      ~9, '%27+and+password%3D%27'
         12        ROPE_ADD                                      3  ~9      ~9, !1
         13        ROPE_END                                      4  ~8      ~9, '%27'
         14        ASSIGN                                                   !2, ~8
    8    15        ECHO                                                     !2
         16      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
150.7 ms | 1393 KiB | 13 Q