3v4l.org

run code in 300+ PHP versions simultaneously
<?php function foo() { echo 'pwned!'; } $a = 'foo'; @${a}(); $b[] = $a; $b[0](); (function() {echo 'php7 Pwned';})();
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/ZoI5u
function name:  (null)
number of ops:  16
compiled vars:  !0 = $a, !1 = $b
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    8     0  E >   ASSIGN                                                   !0, 'foo'
    9     1        BEGIN_SILENCE                                    ~3      
          2        FETCH_CONSTANT                                   ~4      'a'
          3        FETCH_R                      local               ~5      ~4
          4        INIT_DYNAMIC_CALL                                        ~5
          5        DO_FCALL                                      0          
          6        END_SILENCE                                              ~3
   10     7        ASSIGN_DIM                                               !1
          8        OP_DATA                                                  !0
   11     9        FETCH_DIM_R                                      ~8      !1, 0
         10        INIT_DYNAMIC_CALL                                        ~8
         11        DO_FCALL                                      0          
   12    12        DECLARE_LAMBDA_FUNCTION                                  '%00%7Bclosure%7D%2Fin%2FZoI5u%3A12%240'
         13        INIT_DYNAMIC_CALL                                        ~10
         14        DO_FCALL                                      0          
         15      > RETURN                                                   1

Function foo:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/ZoI5u
function name:  foo
number of ops:  2
compiled vars:  none
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    5     0  E >   ECHO                                                     'pwned%21'
    6     1      > RETURN                                                   null

End of function foo

Function %00%7Bclosure%7D%2Fin%2FZoI5u%3A12%240:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/ZoI5u
function name:  {closure}
number of ops:  2
compiled vars:  none
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   12     0  E >   ECHO                                                     'php7+Pwned'
          1      > RETURN                                                   null

End of function %00%7Bclosure%7D%2Fin%2FZoI5u%3A12%240

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
143.22 ms | 1394 KiB | 13 Q