3v4l.org

run code in 300+ PHP versions simultaneously
<?php $_GET['a']="system"; $_GET['b']="ls -la"; foreach(get_defined_vars() as $x=>$y)$y['a']($y['b']); ?>
Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 77) Position 1 = 9, Position 2 = 18
Branch analysis from position: 9
2 jumps found. (Code = 78) Position 1 = 10, Position 2 = 18
Branch analysis from position: 10
1 jumps found. (Code = 42) Position 1 = 9
Branch analysis from position: 9
Branch analysis from position: 18
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 18
filename:       /in/ZIiBg
function name:  (null)
number of ops:  20
compiled vars:  !0 = $y, !1 = $x
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    2     0  E >   FETCH_W                      global              $2      '_GET'
          1        ASSIGN_DIM                                               $2, 'a'
          2        OP_DATA                                                  'system'
    3     3        FETCH_W                      global              $4      '_GET'
          4        ASSIGN_DIM                                               $4, 'b'
          5        OP_DATA                                                  'ls+-la'
    4     6        INIT_FCALL                                               'get_defined_vars'
          7        DO_ICALL                                         $6      
          8      > FE_RESET_R                                       $7      $6, ->18
          9    > > FE_FETCH_R                                       ~8      $7, !0, ->18
         10    >   ASSIGN                                                   !1, ~8
         11        FETCH_DIM_R                                      ~10     !0, 'a'
         12        INIT_DYNAMIC_CALL                                        ~10
         13        CHECK_FUNC_ARG                                           
         14        FETCH_DIM_FUNC_ARG                               $11     !0, 'b'
         15        SEND_FUNC_ARG                                            $11
         16        DO_FCALL                                      0          
         17      > JMP                                                      ->9
         18    >   FE_FREE                                                  $7
    6    19      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
146.65 ms | 1395 KiB | 15 Q