3v4l.org

run code in 500+ PHP versions simultaneously
<?php //-------------------------------------------------- // Just while the function is re-named if (!function_exists('is_trusted')) { function is_trusted($value) { return is_literal($value); } } //-------------------------------------------------- $limit = trim(' 100 '); // Not trusted $_GET['ids'] = [trim(' 1 '), 2, 3]; var_dump($_GET['ids'][0], is_trusted($_GET['ids'][0])); $ids_untrusted = ( $_GET['ids'] ?? [] ); $ids_trusted = array_map( 'intval', $ids_untrusted ); //-------------------------------------------------- $sql = 'SELECT * FROM foo WHERE id IN (' . implode( ',', $ids_untrusted ) . ')'; // Whoops var_dump($sql, is_trusted($sql)); //-------------------------------------------------- $sql = 'SELECT * FROM foo WHERE id IN (' . implode( ',', $ids_trusted ) . ')'; var_dump($sql, is_trusted($sql)); //-------------------------------------------------- $sql = sprintf( 'SELECT * FROM foo WHERE id IN (%s)', implode( ',', $ids_trusted ) ); var_dump($sql, is_trusted($sql)); //-------------------------------------------------- $sql = sprintf( 'SELECT * FROM foo LIMIT %d', (int)$limit ); var_dump($sql, is_trusted($sql)); ?>
Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 43) Position 1 = 5, Position 2 = 6
Branch analysis from position: 5
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 6
filename:       /in/FvtpW
function name:  (null)
number of ops:  86
compiled vars:  !0 = $limit, !1 = $ids_untrusted, !2 = $ids_trusted, !3 = $sql
line      #* E I O op                               fetch          ext  return  operands
-----------------------------------------------------------------------------------------
    6     0  E >   INIT_FCALL                                                   'function_exists'
          1        SEND_VAL                                                     'is_trusted'
          2        DO_ICALL                                             $4      
          3        BOOL_NOT                                             ~5      $4
          4      > JMPZ                                                         ~5, ->6
    7     5    >   DECLARE_FUNCTION                                             'is_trusted'
   14     6    >   FRAMELESS_ICALL_1                trim                ~6      '+100+'
          7        ASSIGN                                                       !0, ~6
   16     8        FRAMELESS_ICALL_1                trim                ~10     '+1+'
          9        INIT_ARRAY                                           ~11     ~10
         10        ADD_ARRAY_ELEMENT                                    ~11     2
         11        ADD_ARRAY_ELEMENT                                    ~11     3
         12        FETCH_W                          global              $8      '_GET'
         13        ASSIGN_DIM                                                   $8, 'ids'
         14        OP_DATA                                                      ~11
   18    15        INIT_FCALL                                                   'var_dump'
         16        FETCH_R                          global              ~12     '_GET'
         17        FETCH_DIM_R                                          ~13     ~12, 'ids'
         18        FETCH_DIM_R                                          ~14     ~13, 0
         19        SEND_VAL                                                     ~14
         20        INIT_FCALL_BY_NAME                                           'is_trusted'
         21        CHECK_FUNC_ARG                                               
         22        FETCH_FUNC_ARG                   global              $15     '_GET'
         23        FETCH_DIM_FUNC_ARG                                   $16     $15, 'ids'
         24        FETCH_DIM_FUNC_ARG                                   $17     $16, 0
         25        SEND_FUNC_ARG                                                $17
         26        DO_FCALL                                          0  $18     
         27        SEND_VAR                                                     $18
         28        DO_ICALL                                                     
   20    29        FETCH_IS                                             ~20     '_GET'
         30        FETCH_DIM_IS                                         ~21     ~20, 'ids'
         31        COALESCE                                             ~22     ~21
         32        QM_ASSIGN                                            ~22     <array>
         33        ASSIGN                                                       !1, ~22
   21    34        INIT_FCALL                                                   'array_map'
         35        SEND_VAL                                                     'intval'
         36        SEND_VAR                                                     !1
         37        DO_ICALL                                             $24     
         38        ASSIGN                                                       !2, $24
   25    39        FRAMELESS_ICALL_2                implode             ~26     '%2C', !1
         40        CONCAT                                               ~27     'SELECT+%2A+FROM+foo+WHERE+id+IN+%28', ~26
         41        CONCAT                                               ~28     ~27, '%29'
         42        ASSIGN                                                       !3, ~28
   27    43        INIT_FCALL                                                   'var_dump'
         44        SEND_VAR                                                     !3
         45        INIT_FCALL_BY_NAME                                           'is_trusted'
         46        SEND_VAR_EX                                                  !3
         47        DO_FCALL                                          0  $30     
         48        SEND_VAR                                                     $30
         49        DO_ICALL                                                     
   31    50        FRAMELESS_ICALL_2                implode             ~32     '%2C', !2
         51        CONCAT                                               ~33     'SELECT+%2A+FROM+foo+WHERE+id+IN+%28', ~32
         52        CONCAT                                               ~34     ~33, '%29'
         53        ASSIGN                                                       !3, ~34
   33    54        INIT_FCALL                                                   'var_dump'
         55        SEND_VAR                                                     !3
         56        INIT_FCALL_BY_NAME                                           'is_trusted'
         57        SEND_VAR_EX                                                  !3
         58        DO_FCALL                                          0  $36     
         59        SEND_VAR                                                     $36
         60        DO_ICALL                                                     
   37    61        FRAMELESS_ICALL_2                implode             ~38     '%2C', !2
         62        ROPE_INIT                                         3  ~40     'SELECT+%2A+FROM+foo+WHERE+id+IN+%28'
         63        ROPE_ADD                                          1  ~40     ~40, ~38
         64        ROPE_END                                          2  ~39     ~40, '%29'
         65        ASSIGN                                                       !3, ~39
   39    66        INIT_FCALL                                                   'var_dump'
         67        SEND_VAR                                                     !3
         68        INIT_FCALL_BY_NAME                                           'is_trusted'
         69        SEND_VAR_EX                                                  !3
         70        DO_FCALL                                          0  $43     
         71        SEND_VAR                                                     $43
         72        DO_ICALL                                                     
   43    73        CAST                                              4  ~45     !0
         74        NOP                                                          
         75        CAST                                              4  ~46     ~45
         76        FAST_CONCAT                                          ~47     'SELECT+%2A+FROM+foo+LIMIT+', ~46
         77        ASSIGN                                                       !3, ~47
   45    78        INIT_FCALL                                                   'var_dump'
         79        SEND_VAR                                                     !3
         80        INIT_FCALL_BY_NAME                                           'is_trusted'
         81        SEND_VAR_EX                                                  !3
         82        DO_FCALL                                          0  $49     
         83        SEND_VAR                                                     $49
         84        DO_ICALL                                                     
   47    85      > RETURN                                                       1


Dynamic Functions:
Dynamic Function 0
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/FvtpW
function name:  is_trusted
number of ops:  6
compiled vars:  !0 = $value
line      #* E I O op                               fetch          ext  return  operands
-----------------------------------------------------------------------------------------
    7     0  E >   RECV                                                 !0      
    8     1        INIT_FCALL_BY_NAME                                           'is_literal'
          2        SEND_VAR_EX                                                  !0
          3        DO_FCALL                                          0  $1      
          4      > RETURN                                                       $1
    9     5*     > RETURN                                                       null

End of Dynamic Function 0

Generated using Vulcan Logic Dumper, using php 8.5.0


preferences:
177.36 ms | 1480 KiB | 16 Q