3v4l.org

run code in 300+ PHP versions simultaneously
<?php $QUERYSTRING = "test.EPS"; do {$a = $QUERYSTRING; $QUERYSTRING = str_replace(array('..', '~', chr(0), ':', '?'), '', $QUERYSTRING); } while ($a != $QUERYSTRING); if( (substr(strtolower($QUERYSTRING), -3) != ".ai") && (substr(strtolower($QUERYSTRING), -4) != ".eps")) { echo "not allowed"; } else { echo "allowed"; }
Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 44) Position 1 = 15, Position 2 = 1
Branch analysis from position: 15
2 jumps found. (Code = 46) Position 1 = 24, Position 2 = 33
Branch analysis from position: 24
2 jumps found. (Code = 43) Position 1 = 34, Position 2 = 36
Branch analysis from position: 34
1 jumps found. (Code = 42) Position 1 = 37
Branch analysis from position: 37
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 36
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 33
Branch analysis from position: 1
filename:       /in/VAmKW
function name:  (null)
number of ops:  38
compiled vars:  !0 = $QUERYSTRING, !1 = $a
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    3     0  E >   ASSIGN                                                   !0, 'test.EPS'
    5     1    >   ASSIGN                                                   !1, !0
          2        INIT_FCALL                                               'str_replace'
          3        INIT_ARRAY                                       ~4      '..'
          4        ADD_ARRAY_ELEMENT                                ~4      '%7E'
          5        ADD_ARRAY_ELEMENT                                ~4      '%00'
          6        ADD_ARRAY_ELEMENT                                ~4      '%3A'
          7        ADD_ARRAY_ELEMENT                                ~4      '%3F'
          8        SEND_VAL                                                 ~4
          9        SEND_VAL                                                 ''
         10        SEND_VAR                                                 !0
         11        DO_ICALL                                         $5      
         12        ASSIGN                                                   !0, $5
         13        IS_NOT_EQUAL                                             !1, !0
         14      > JMPNZ                                                    ~7, ->1
    8    15    >   INIT_FCALL                                               'substr'
         16        INIT_FCALL                                               'strtolower'
         17        SEND_VAR                                                 !0
         18        DO_ICALL                                         $8      
         19        SEND_VAR                                                 $8
         20        SEND_VAL                                                 -3
         21        DO_ICALL                                         $9      
         22        IS_NOT_EQUAL                                     ~10     $9, '.ai'
         23      > JMPZ_EX                                          ~10     ~10, ->33
         24    >   INIT_FCALL                                               'substr'
         25        INIT_FCALL                                               'strtolower'
         26        SEND_VAR                                                 !0
         27        DO_ICALL                                         $11     
         28        SEND_VAR                                                 $11
         29        SEND_VAL                                                 -4
         30        DO_ICALL                                         $12     
         31        IS_NOT_EQUAL                                     ~13     $12, '.eps'
         32        BOOL                                             ~10     ~13
         33    > > JMPZ                                                     ~10, ->36
    9    34    >   ECHO                                                     'not+allowed'
         35      > JMP                                                      ->37
   11    36    >   ECHO                                                     'allowed'
   12    37    > > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
154.34 ms | 1396 KiB | 19 Q