3v4l.org

run code in 300+ PHP versions simultaneously
<?php $b = 'create_function'; $wp = $b('$a',strrev(';)a$(lave')); $wp('echo "foo";'); ?>
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/Eljsl
function name:  (null)
number of ops:  13
compiled vars:  !0 = $b, !1 = $wp
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    2     0  E >   ASSIGN                                                   !0, 'create_function'
    3     1        INIT_DYNAMIC_CALL                                        !0
          2        SEND_VAL_EX                                              '%24a'
          3        INIT_FCALL                                               'strrev'
          4        SEND_VAL                                                 '%3B%29a%24%28lave'
          5        DO_ICALL                                         $3      
          6        SEND_VAR_NO_REF_EX                                       $3
          7        DO_FCALL                                      0  $4      
          8        ASSIGN                                                   !1, $4
    4     9        INIT_DYNAMIC_CALL                                        !1
         10        SEND_VAL_EX                                              'echo+%22foo%22%3B'
         11        DO_FCALL                                      0          
    6    12      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
201.62 ms | 1394 KiB | 15 Q