3v4l.org

run code in 300+ PHP versions simultaneously
<?php $word = "die('Lalala'); 1||1/e\0"; // Slightly contrived example, but let's pretend we're // case-normalizing a user-provided word, and forgot to // preg_quote $text = preg_replace('/'.$word.'/i', $word, $text);
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/JlE7P
function name:  (null)
number of ops:  10
compiled vars:  !0 = $word, !1 = $text
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    2     0  E >   ASSIGN                                                   !0, 'die%28%27Lalala%27%29%3B+1%7C%7C1%2Fe%00'
    8     1        INIT_FCALL                                               'preg_replace'
          2        CONCAT                                           ~3      '%2F', !0
          3        CONCAT                                           ~4      ~3, '%2Fi'
          4        SEND_VAL                                                 ~4
          5        SEND_VAR                                                 !0
          6        SEND_VAR                                                 !1
          7        DO_ICALL                                         $5      
          8        ASSIGN                                                   !1, $5
          9      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
164.65 ms | 1394 KiB | 15 Q