3v4l.org

run code in 300+ PHP versions simultaneously
<?php //include('/etc/profile'); $myfile = fopen("/tmp/hacked.txt", "w") or die("Unable to open file!"); $txt = "John Doe\n"; fwrite($myfile, $txt); $txt = "Jane Doe\n"; fwrite($myfile, $txt); fclose($myfile); include('/tmp/hacked.txt'); echo system("echo 'test' > /tmp/hacked.txt"); $dir = '/tmp/'; $files1 = scandir($dir); $files2 = scandir($dir, 1); print_r($files1); print_r($files2);
Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 47) Position 1 = 6, Position 2 = 8
Branch analysis from position: 6
1 jumps found. (Code = 79) Position 1 = -2
Branch analysis from position: 8
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/F8d3i
function name:  (null)
number of ops:  43
compiled vars:  !0 = $myfile, !1 = $txt, !2 = $dir, !3 = $files1, !4 = $files2
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    6     0  E >   INIT_FCALL                                               'fopen'
          1        SEND_VAL                                                 '%2Ftmp%2Fhacked.txt'
          2        SEND_VAL                                                 'w'
          3        DO_ICALL                                         $5      
          4        ASSIGN                                           ~6      !0, $5
          5      > JMPNZ_EX                                         ~6      ~6, ->8
          6    > > EXIT                                                     'Unable+to+open+file%21'
          7*       BOOL                                             ~6      <true>
    7     8    >   ASSIGN                                                   !1, 'John+Doe%0A'
    8     9        INIT_FCALL                                               'fwrite'
         10        SEND_VAR                                                 !0
         11        SEND_VAR                                                 !1
         12        DO_ICALL                                                 
    9    13        ASSIGN                                                   !1, 'Jane+Doe%0A'
   10    14        INIT_FCALL                                               'fwrite'
         15        SEND_VAR                                                 !0
         16        SEND_VAR                                                 !1
         17        DO_ICALL                                                 
   11    18        INIT_FCALL                                               'fclose'
         19        SEND_VAR                                                 !0
         20        DO_ICALL                                                 
   13    21        INCLUDE_OR_EVAL                                          '%2Ftmp%2Fhacked.txt', INCLUDE
   15    22        INIT_FCALL                                               'system'
         23        SEND_VAL                                                 'echo+%27test%27+%3E+%2Ftmp%2Fhacked.txt'
         24        DO_ICALL                                         $13     
         25        ECHO                                                     $13
   17    26        ASSIGN                                                   !2, '%2Ftmp%2F'
   18    27        INIT_FCALL                                               'scandir'
         28        SEND_VAR                                                 !2
         29        DO_ICALL                                         $15     
         30        ASSIGN                                                   !3, $15
   19    31        INIT_FCALL                                               'scandir'
         32        SEND_VAR                                                 !2
         33        SEND_VAL                                                 1
         34        DO_ICALL                                         $17     
         35        ASSIGN                                                   !4, $17
   21    36        INIT_FCALL                                               'print_r'
         37        SEND_VAR                                                 !3
         38        DO_ICALL                                                 
   22    39        INIT_FCALL                                               'print_r'
         40        SEND_VAR                                                 !4
         41        DO_ICALL                                                 
         42      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
153.16 ms | 1400 KiB | 25 Q