3v4l.org

run code in 300+ PHP versions simultaneously
<?php $a ='1111'; $newfunc = @create_function('', 'global $a;$a.=123;'); @$newfunc(); var_dump($a);
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/nKEjK
function name:  (null)
number of ops:  16
compiled vars:  !0 = $a, !1 = $newfunc
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    3     0  E >   ASSIGN                                                   !0, '1111'
    4     1        BEGIN_SILENCE                                    ~3      
          2        INIT_FCALL_BY_NAME                                       'create_function'
          3        SEND_VAL_EX                                              ''
          4        SEND_VAL_EX                                              'global+%24a%3B%24a.%3D123%3B'
          5        DO_FCALL                                      0  $4      
          6        END_SILENCE                                              ~3
          7        ASSIGN                                                   !1, $4
    5     8        BEGIN_SILENCE                                    ~6      
          9        INIT_DYNAMIC_CALL                                        !1
         10        DO_FCALL                                      0          
         11        END_SILENCE                                              ~6
    6    12        INIT_FCALL                                               'var_dump'
         13        SEND_VAR                                                 !0
         14        DO_ICALL                                                 
         15      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
286.12 ms | 1394 KiB | 16 Q