3v4l.org

run code in 300+ PHP versions simultaneously
<?php function hi80vul() {} $code = 'echo "OK!!!";'; function ev($callback) { $callback(); } $str = '\', (ev(function () {' . $code. '})), \''; mb_ereg_replace('^(.*)$', 'hi80vul(\'\1\')', $str, 'e');
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/gsBmX
function name:  (null)
number of ops:  11
compiled vars:  !0 = $code, !1 = $str
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    7     0  E >   ASSIGN                                                   !0, 'echo+%22OK%21%21%21%22%3B'
   12     1        CONCAT                                           ~3      '%27%2C+%28ev%28function+%28%29+%7B', !0
          2        CONCAT                                           ~4      ~3, '%7D%29%29%2C+%27'
          3        ASSIGN                                                   !1, ~4
   13     4        INIT_FCALL                                               'mb_ereg_replace'
          5        SEND_VAL                                                 '%5E%28.%2A%29%24'
          6        SEND_VAL                                                 'hi80vul%28%27%5C1%27%29'
          7        SEND_VAR                                                 !1
          8        SEND_VAL                                                 'e'
          9        DO_ICALL                                                 
         10      > RETURN                                                   1

Function hi80vul:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/gsBmX
function name:  hi80vul
number of ops:  1
compiled vars:  none
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    5     0  E > > RETURN                                                   null

End of function hi80vul

Function ev:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/gsBmX
function name:  ev
number of ops:  4
compiled vars:  !0 = $callback
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    9     0  E >   RECV                                             !0      
   10     1        INIT_DYNAMIC_CALL                                        !0
          2        DO_FCALL                                      0          
   11     3      > RETURN                                                   null

End of function ev

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
150.29 ms | 1395 KiB | 15 Q