3v4l.org

run code in 300+ PHP versions simultaneously
<?php /* Challenge 1: Modify Test::$secret before it's output. Rules:: 1. No use of Reflection API / runkit extension 2. No stopping execution before Test::run() 3. No Exceptions or PHP errors / warnings notices allowed Hints: 1. Caesar 2. Magic methods 3. Requires a new feature of PHP 5.4 */ class Test { private $secret = 'Nyy lbhe Onfr ner orybat gb hf.'; private $callback; final public function run() { call_user_func($this->callback); return $this->secret . PHP_EOL; } public function __set($k, $v) { $key = $v[($v[$v])]; // $v is some kind of weird array $value = $v(); // and a callback! $this->{$key} = $value; } } $test = new Test; // start editing here class Fixer extends ArrayObject { public $k; public $v; public function offsetGet($i) { return $this->k; } public function __construct($k, $v) { $this->k = $k; $this->v = $v; } public function __invoke() { return $this->v; } } $test->foo = new Fixer('callback', function() {}); // modifying secret, but no access to read it $test->foo = new Fixer('secret', 'All your Base are belong to us.'); // end editing here echo $test->run();
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/Z1YE5
function name:  (null)
number of ops:  20
compiled vars:  !0 = $test
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   42     0  E >   NEW                                              $1      'Test'
          1        DO_FCALL                                      0          
          2        ASSIGN                                                   !0, $1
   71     3        NEW                                              $5      'Fixer'
          4        SEND_VAL_EX                                              'callback'
          5        DECLARE_LAMBDA_FUNCTION                                  '%00%7Bclosure%7D%2Fin%2FZ1YE5%3A71%240'
          6        SEND_VAL_EX                                              ~6
          7        DO_FCALL                                      0          
          8        ASSIGN_OBJ                                               !0, 'foo'
          9        OP_DATA                                                  $5
   74    10        NEW                                              $9      'Fixer'
         11        SEND_VAL_EX                                              'secret'
         12        SEND_VAL_EX                                              'All+your+Base+are+belong+to+us.'
         13        DO_FCALL                                      0          
         14        ASSIGN_OBJ                                               !0, 'foo'
         15        OP_DATA                                                  $9
   78    16        INIT_METHOD_CALL                                         !0, 'run'
         17        DO_FCALL                                      0  $11     
         18        ECHO                                                     $11
         19      > RETURN                                                   1

Function %00%7Bclosure%7D%2Fin%2FZ1YE5%3A71%240:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/Z1YE5
function name:  {closure}
number of ops:  1
compiled vars:  none
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   71     0  E > > RETURN                                                   null

End of function %00%7Bclosure%7D%2Fin%2FZ1YE5%3A71%240

Class Test:
Function run:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/Z1YE5
function name:  run
number of ops:  7
compiled vars:  none
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   28     0  E >   FETCH_OBJ_R                                      ~0      'callback'
          1        INIT_USER_CALL                                0          'call_user_func', ~0
          2        DO_FCALL                                      0          
   29     3        FETCH_OBJ_R                                      ~2      'secret'
          4        CONCAT                                           ~3      ~2, '%0A'
          5      > RETURN                                                   ~3
   30     6*     > RETURN                                                   null

End of function run

Function __set:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/Z1YE5
function name:  __set
number of ops:  11
compiled vars:  !0 = $k, !1 = $v, !2 = $key, !3 = $value
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   32     0  E >   RECV                                             !0      
          1        RECV                                             !1      
   34     2        FETCH_DIM_R                                      ~4      !1, !1
          3        FETCH_DIM_R                                      ~5      !1, ~4
          4        ASSIGN                                                   !2, ~5
   35     5        INIT_DYNAMIC_CALL                                        !1
          6        DO_FCALL                                      0  $7      
          7        ASSIGN                                                   !3, $7
   36     8        ASSIGN_OBJ                                               !2
          9        OP_DATA                                                  !3
   37    10      > RETURN                                                   null

End of function __set

End of class Test.

Class Fixer:
Function offsetget:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/Z1YE5
function name:  offsetGet
number of ops:  4
compiled vars:  !0 = $i
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   53     0  E >   RECV                                             !0      
   55     1        FETCH_OBJ_R                                      ~1      'k'
          2      > RETURN                                                   ~1
   56     3*     > RETURN                                                   null

End of function offsetget

Function __construct:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/Z1YE5
function name:  __construct
number of ops:  7
compiled vars:  !0 = $k, !1 = $v
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   58     0  E >   RECV                                             !0      
          1        RECV                                             !1      
   60     2        ASSIGN_OBJ                                               'k'
          3        OP_DATA                                                  !0
   61     4        ASSIGN_OBJ                                               'v'
          5        OP_DATA                                                  !1
   62     6      > RETURN                                                   null

End of function __construct

Function __invoke:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/Z1YE5
function name:  __invoke
number of ops:  3
compiled vars:  none
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   66     0  E >   FETCH_OBJ_R                                      ~0      'v'
          1      > RETURN                                                   ~0
   67     2*     > RETURN                                                   null

End of function __invoke

End of class Fixer.

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
157.34 ms | 1399 KiB | 13 Q