3v4l.org

run code in 300+ PHP versions simultaneously
<?php $QUERYSTRING = "test.php?.eps"; $changed = -1; do {$a = $QUERYSTRING; $QUERYSTRING = str_replace(array('..', '~', chr(0), ':', '?'), '', $QUERYSTRING); $changed++; } while ($a != $QUERYSTRING); echo $QUERYSTRING . "\n"; if($changess === 0 && (substr(strtolower($QUERYSTRING), -3) == ".ai") || (substr(strtolower($QUERYSTRING), -4) == ".eps")) { echo "allowed"; } else { echo "not allowed"; }
Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 44) Position 1 = 17, Position 2 = 2
Branch analysis from position: 17
2 jumps found. (Code = 46) Position 1 = 21, Position 2 = 30
Branch analysis from position: 21
2 jumps found. (Code = 47) Position 1 = 31, Position 2 = 40
Branch analysis from position: 31
2 jumps found. (Code = 43) Position 1 = 41, Position 2 = 43
Branch analysis from position: 41
1 jumps found. (Code = 42) Position 1 = 44
Branch analysis from position: 44
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 43
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 40
Branch analysis from position: 30
Branch analysis from position: 2
filename:       /in/D2Mtn
function name:  (null)
number of ops:  45
compiled vars:  !0 = $QUERYSTRING, !1 = $changed, !2 = $a, !3 = $changess
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    3     0  E >   ASSIGN                                                   !0, 'test.php%3F.eps'
    4     1        ASSIGN                                                   !1, -1
    6     2    >   ASSIGN                                                   !2, !0
          3        INIT_FCALL                                               'str_replace'
          4        INIT_ARRAY                                       ~7      '..'
          5        ADD_ARRAY_ELEMENT                                ~7      '%7E'
          6        ADD_ARRAY_ELEMENT                                ~7      '%00'
          7        ADD_ARRAY_ELEMENT                                ~7      '%3A'
          8        ADD_ARRAY_ELEMENT                                ~7      '%3F'
          9        SEND_VAL                                                 ~7
         10        SEND_VAL                                                 ''
         11        SEND_VAR                                                 !0
         12        DO_ICALL                                         $8      
         13        ASSIGN                                                   !0, $8
         14        PRE_INC                                                  !1
         15        IS_NOT_EQUAL                                             !2, !0
         16      > JMPNZ                                                    ~11, ->2
    8    17    >   CONCAT                                           ~12     !0, '%0A'
         18        ECHO                                                     ~12
   10    19        IS_IDENTICAL                                     ~13     !3, 0
         20      > JMPZ_EX                                          ~13     ~13, ->30
         21    >   INIT_FCALL                                               'substr'
         22        INIT_FCALL                                               'strtolower'
         23        SEND_VAR                                                 !0
         24        DO_ICALL                                         $14     
         25        SEND_VAR                                                 $14
         26        SEND_VAL                                                 -3
         27        DO_ICALL                                         $15     
         28        IS_EQUAL                                         ~16     $15, '.ai'
         29        BOOL                                             ~13     ~16
         30    > > JMPNZ_EX                                         ~13     ~13, ->40
         31    >   INIT_FCALL                                               'substr'
         32        INIT_FCALL                                               'strtolower'
         33        SEND_VAR                                                 !0
         34        DO_ICALL                                         $17     
         35        SEND_VAR                                                 $17
         36        SEND_VAL                                                 -4
         37        DO_ICALL                                         $18     
         38        IS_EQUAL                                         ~19     $18, '.eps'
         39        BOOL                                             ~13     ~19
         40    > > JMPZ                                                     ~13, ->43
   12    41    >   ECHO                                                     'allowed'
         42      > JMP                                                      ->44
   14    43    >   ECHO                                                     'not+allowed'
   15    44    > > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
164.78 ms | 1400 KiB | 19 Q