3v4l.org

run code in 300+ PHP versions simultaneously
<?php //include('/etc/profile'); echo system("echo 'test' > /tmp/hacked.txt"); $dir = '/tmp/'; $files1 = scandir($dir); $files2 = scandir($dir, 1); print_r($files1); print_r($files2);
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/TIHAJ
function name:  (null)
number of ops:  21
compiled vars:  !0 = $dir, !1 = $files1, !2 = $files2
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    5     0  E >   INIT_FCALL                                               'system'
          1        SEND_VAL                                                 'echo+%27test%27+%3E+%2Ftmp%2Fhacked.txt'
          2        DO_ICALL                                         $3      
          3        ECHO                                                     $3
    7     4        ASSIGN                                                   !0, '%2Ftmp%2F'
    8     5        INIT_FCALL                                               'scandir'
          6        SEND_VAR                                                 !0
          7        DO_ICALL                                         $5      
          8        ASSIGN                                                   !1, $5
    9     9        INIT_FCALL                                               'scandir'
         10        SEND_VAR                                                 !0
         11        SEND_VAL                                                 1
         12        DO_ICALL                                         $7      
         13        ASSIGN                                                   !2, $7
   11    14        INIT_FCALL                                               'print_r'
         15        SEND_VAR                                                 !1
         16        DO_ICALL                                                 
   12    17        INIT_FCALL                                               'print_r'
         18        SEND_VAR                                                 !2
         19        DO_ICALL                                                 
         20      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
152.82 ms | 1395 KiB | 19 Q