3v4l.org

run code in 300+ PHP versions simultaneously
<?php #$srch = "{eval("echo phpinfo();//apple1(?=/)\e")}"; #$srch = "{${eval("phpinfo();apple(?=/)\e")}}"; #$srch = "include(eval(phpinfo());apple(?=/)\\e)"; $srch = "{${phpinfo() /*apple(?=/)\\e*/}}"; echo "\n\n\n\n\n"; echo $srch; echo "\n"; $search = htmlentities($srch); echo $search; echo "\n"; if (strpos($search, 'apple') !== false){ echo "in the if!"; echo "\n"; echo preg_replace("/".$search."/", $search." <img src='".$search.".png'>", "apple"); }
Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 43) Position 1 = 20, Position 2 = 33
Branch analysis from position: 20
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 33
filename:       /in/dMlqe
function name:  (null)
number of ops:  34
compiled vars:  !0 = $srch, !1 = $search
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    5     0  E >   INIT_FCALL                                               'phpinfo'
          1        DO_ICALL                                         $2      
          2        FETCH_R                      local               ~3      $2
          3        CAST                                          6  ~4      ~3
          4        ASSIGN                                                   !0, ~4
    6     5        ECHO                                                     '%0A%0A%0A%0A%0A'
          6        ECHO                                                     !0
          7        ECHO                                                     '%0A'
    7     8        INIT_FCALL                                               'htmlentities'
          9        SEND_VAR                                                 !0
         10        DO_ICALL                                         $6      
         11        ASSIGN                                                   !1, $6
    8    12        ECHO                                                     !1
         13        ECHO                                                     '%0A'
    9    14        INIT_FCALL                                               'strpos'
         15        SEND_VAR                                                 !1
         16        SEND_VAL                                                 'apple'
         17        DO_ICALL                                         $8      
         18        TYPE_CHECK                                  1018          $8
         19      > JMPZ                                                     ~9, ->33
   10    20    >   ECHO                                                     'in+the+if%21'
         21        ECHO                                                     '%0A'
   11    22        INIT_FCALL                                               'preg_replace'
         23        CONCAT                                           ~10     '%2F', !1
         24        CONCAT                                           ~11     ~10, '%2F'
         25        SEND_VAL                                                 ~11
         26        CONCAT                                           ~12     !1, '+%3Cimg+src%3D%27'
         27        CONCAT                                           ~13     ~12, !1
         28        CONCAT                                           ~14     ~13, '.png%27%3E'
         29        SEND_VAL                                                 ~14
         30        SEND_VAL                                                 'apple'
         31        DO_ICALL                                         $15     
         32        ECHO                                                     $15
   12    33    > > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
187.17 ms | 1396 KiB | 21 Q