3v4l.org

run code in 300+ PHP versions simultaneously
<?php /* $values['test']['radio'] = "foo']) OR die('RCE');"; $myVar = "['test']['radio']"; eval("\$x = (isset(\$values$myVar)) ? \$values$myVar : 'failed';"); print_r($x); */ $val = '"test"; echo "hacked code running";'; $val = '\$cat)) "fake1" : "fake2"; echo "HACKS"; //'; eval("\$x = (isset($val)) ? $val : 'fail'");
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/T10JB
function name:  (null)
number of ops:  9
compiled vars:  !0 = $val
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   11     0  E >   ASSIGN                                                   !0, '%22test%22%3B+echo+%22hacked+code+running%22%3B'
   12     1        ASSIGN                                                   !0, '%5C%24cat%29%29+%22fake1%22+%3A+%22fake2%22%3B+echo+%22HACKS%22%3B+%2F%2F'
   13     2        ROPE_INIT                                     5  ~4      '%24x+%3D+%28isset%28'
          3        ROPE_ADD                                      1  ~4      ~4, !0
          4        ROPE_ADD                                      2  ~4      ~4, '%29%29+%3F+'
          5        ROPE_ADD                                      3  ~4      ~4, !0
          6        ROPE_END                                      4  ~3      ~4, '+%3A+%27fail%27'
          7        INCLUDE_OR_EVAL                                          ~3, EVAL
          8      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
178.13 ms | 1392 KiB | 13 Q