function g2()
{
    foreach ($GLOBALS['usr_langs'] as $lang) {
        f2();
        echo $lang . ' ';
    }
}

function f1($a)
{
    echo $a;
    $a = htmlspecialchars($a);
    echo $a;
    $a = htmlspecialchars($a);
    $a = f2($a);
}

function f3()
{
    /*
     * Global requires a variable_name
     */
    // global f1();						// Illegal
    global ${f2()};
    // Legal
    // global $c->d;						// Illegal
}

function main()
{
    f1();
    f2();
    f3();
    f4();
    f5();
    f6();
    f7();
    f8();
}

<?php

# [OK]
function f2($b)
{
    $b = htmlspecialchars($b);
    return $b;
}
$A = $_POST['b'];
$A = f2($A);
echo $A;

<?php

function f2($b)
{
    $b = htmlspecialchars($b);
    return $b;
    # filtering left side permanently
}
echo f2($_GET['a']);
# NOTHING
echo $_GET['a'];
# XSS

<?php

function f1()
{
    debug_print_backtrace();
}
function f2($arg1, $arg2)
{
    f1();
    yield;
    // force generator
}
function f3($gen)
{
    $gen->rewind();
    // trigger run
}
$gen = f2('foo', 'bar');
f3($gen);

//*/
///*
// 2 default followed by one non-default; unusual, but permitted
function f2($p1 = 100, $p2 = 1.23, $p3)
{
    $argList = func_get_args();
    echo "f2: # arguments passed is " . count($argList) . "\n";
    foreach ($argList as $k => $e) {
        echo "\targ[{$k}] = >{$e}<\n";
    }
    echo "\$p1: " . ($p1 == NULL ? "NULL" : $p1) . ", \$p2: " . ($p2 == NULL ? "NULL" : $p2) . ", \$p3: " . ($p3 == NULL ? "NULL" : $p3) . "\n";
}
f2();
f2(10);
f2(10, 20);
f2(10, 20, 30);
//*/
///*
// 1 default followed by one non-default followed by 1 default; unusual, but permitted
function f3($p1 = 100, $p2, $p3 = "abc")
{
    $argList = func_get_args();
    echo "f3: # arguments passed is " . count($argList) . "\n";
    foreach ($argList as $k => $e) {
        echo "\targ[{$k}] = >{$e}<\n";
    }
    echo "\$p1: " . ($p1 == NULL ? "NULL" : $p1) . ", \$p2: " . ($p2 == NULL ? "NULL" : $p2) . ", \$p3: " . ($p3 == NULL ? "NULL" : $p3) . "\n";
}
f3();
f3(10);
f3(10, 20);

$x = 2;
function f1($par)
{
    var_dump($par);
    $par *= 2;
}
f1($x);
// int(2)
var_dump($x);
// int(2)
function f2(&$par)
{
    var_dump($par);
    $par *= 2;
}
f2($x);
// int(2)
var_dump($x);
// int(4)
function f3(&$par)
{
    global $par;
    var_dump($par);
    $par *= 2;
}
f3($x);
// NULL
var_dump($x);
// int(4)
/*
 * signature ::= '&'? IDENT formal_parameter*

//.........这里部分代码省略.........
         $gar_PirmsRed = $m['LBruto'] / 100;
         if ($this->MyPOST['noapalot_garumu'] == '1') {
             $gar_PirmsRed = floor($m['LBruto'] / 10) / 10;
         } elseif ($this->MyPOST['noapalot_garumu'] == '2') {
             $gar_PirmsRed = (floor($m['LBruto'] / 10) + 0.5) / 10;
         }
         //---Tiek pārbaudīts, vai garums tiek ņemts kā nominālais garums, vai notiek nominālā garuma aprēķināšana, no kura tiks rēķināts Neto tilpums!-------------------------------------------------------------------------
         $gar_PecRed = gAtskaite::nom($gar_PirmsRed, $virsmeri, $min_virsmers);
         if ($this->MyPOST['is_vika'] == 'on') {
             $gar_PecRed = $m['LPecReduc'] / 100;
         }
         //---Tiek aprēķināts nominālais garums pirms pirms redukcijas, lai varētu aprēķināt tilpumu bez virsmēra!-------------------------------------------------------------------------
         $gar_NomPirsmRed = gAtskaite::nom($gar_PirmsRed, $virsmeri, $min_virsmers);
         //----------------------------------------------------------------------------
         $diam_TievPirmsRed = $m['DBruto'] / 1000;
         $diam_VidusPirmsRed = $m['DBruto'] / 1000;
         $diam_ResPirmsRed = $m['DBruto'] / 1000;
         $rauk_koef = get_raukums_no_diam($raukums, $diam_TievPirmsRed * 1000);
         if ($this->MyPOST['noapalot_diametru'] == 'on') {
             $diam_TievPirmsRed = (floor($m['DBruto'] / 10) + 0.5) / 100;
             $diam_VidusPirmsRed = (floor($m['DBruto'] / 10) + 0.5) / 100;
             $diam_ResPirmsRed = (floor($m['DBruto'] / 10) + 0.5) / 100;
         }
         //----------------------------------------------------------------------------
         if ($this->MyPOST['braka_virsmers'] == 'on') {
         } else {
         }
         $DPecReduc = $m['DPecReduc'] / 1000;
         $DReduc = $DBruto - $DPecReduc;
         if ($m[brakis] != '255') {
             $irbrakis = true;
             $brkods = 'standart';
         }
         $tilpums_bruto = f2($diam_TievPirmsRed, $gar_PirmsRed, $rauk_koef, $koeficients, $gostu_tabula);
         $tilpums_neto = f2($DPecReduc, $gar_PecRed, $rauk_koef, $koeficients, $gostu_tabula);
         $tilpums_bruto_bez_virsmera = f2($diam_TievPirmsRed, $gar_NomPirsmRed, $rauk_koef, $koeficients, $gostu_tabula);
         $tilpums_virsmers = $tilpums_bruto - $tilpums_bruto_bez_virsmera;
         $tilpums_garuma_redukcija = $tilpums_bruto_bez_virsmera - $tilpums_neto;
         $tilpums_diametrs_redukcija = 0;
         //----------
         $SVBruto += $tilpums_bruto;
         if ($gostu_tabula) {
             if ($VBruto == -1 || $VReducD == -1 || $VReducL == -1 || $VVirsm == -1) {
                 $SSkaitsBad++;
             }
             if ($VBruto == -1) {
                 $VBruto = 0;
             }
             if ($VReducD == -1) {
                 $VReducD = 0;
             }
             if ($VReducL == -1) {
                 $VReducL = 0;
             }
             if ($VVirsm == -1) {
                 $VVirsm = 0;
             }
         }
         $VBrakis = 0;
         if (strlen($this->rejected_values[$key]) == 1) {
             $irbrakis = true;
             $brkods = $this->rejected_values[$key];
         }
         if (!$irbrakis) {
             /*Vai ir brakis?*/
             $SVReducD += $tilpums_diametrs_redukcija;

{
    $arr = array(1, 2, 3);
    foreach ($arr as &$v1) {
        foreach ($arr as $v2) {
            return;
        }
    }
}
function f3()
{
    $arr = array(1, 2, 3);
    foreach ($arr as $v1) {
        foreach ($arr as &$v2) {
            return;
        }
    }
}
function f4()
{
    $arr = array(1, 2, 3);
    foreach ($arr as &$v1) {
        foreach ($arr as &$v2) {
            return;
        }
    }
}
f1();
f2();
f3();
f4();
echo "Done\n";

<?php

# not entry point, vuln
function f1($a)
{
    echo $a;
}
function f2($b)
{
    echo $_GET['a'];
}
if (!defined('SOME_CONST')) {
    die;
}
f2(3);

    echo "f1 fetch\n";
    (yield $row);
}
function f2()
{
    $db = new db();
    $obj = $db->async_query('select sleep(1)');
    echo "f2 async_query\n";
    (yield $obj);
    $row = $db->fetch();
    echo "f2 fetch\n";
    (yield $row);
}
$start = microtime();
$gen1 = f1();
$gen2 = f2();
$gen1->current();
$gen2->current();
$gen1->next();
$gen2->next();
$ret1 = $gen1->current();
$ret2 = $gen2->current();
var_dump($ret1);
var_dump($ret2);
$end = microtime();
echo "Total time: ", $end - $start;
class db
{
    static $links;
    private $obj;
    function getConn()

function f()
{
    f2();
}

echo "--------------- test type hint class-name ---------------------\n";
class C1
{
}
class D1 extends C1
{
}
function f2(C1 $p1)
{
    echo "Inside " . __METHOD__ . "\n";
    var_dump($p1);
}
//f2(123); // Argument 1 passed to f1() must be an instance of C1, integer give
//f2([10,20]);    // Argument 1 passed to f2() must be an instance of C1, array given
f2(new C1());
f2(new D1());
echo "--------------- test type hint object ---------------------\n";
function f3(object $p1)
{
    echo "Inside " . __METHOD__ . "\n";
    var_dump($p1);
}
//f3(123); // Argument 1 passed to f1() must be an instance of object, integer given
//f3([10,20]);    // Argument 1 passed to f2() must be an instance of object, array given
//f3(new C1);         // must be an instance of object, instance of C1 given
// object is not a special/recognized marker in this context
echo "--------------- test type hint interface-name ---------------------\n";
interface I1
{
}
interface I2 extends I1

echo 'f(10, 12) + g(15) = ' . (f(10, 12) + g(15)) . "\n";
echo 'f(10, 12) - g(15) = ' . (f(10, 12) - g(15)) . "\n";
echo 'f(10, 12) * g(15) = ' . f(10, 12) * g(15) . "\n";
echo 'f(10, 12) / g(15) = ' . f(10, 12) / g(15) . "\n";
function f1($a)
{
    echo "Inside f1\n";
    return $a;
}
function f2($a)
{
    echo "Inside f2\n";
    return $a;
}
function f3($a)
{
    echo "Inside f3\n";
    return $a;
}
function f4($a)
{
    echo "Inside f4\n";
    return $a;
}
$values = array(0, 1, 2, 3, 4, 5, 6);
var_dump($values);
$values[f1(4) - f2(2)] = $values[f3(3) * f4(2)];
var_dump($values);
$values = array(0, 1, 2, 3, 4, 5, 6);
$values[f1(1) + f2(2)] = $values[f3(6) / f4(3)];
var_dump($values);

    }
    function f2()
    {
    }
}
namespace functions\ns1 {
    function f1()
    {
    }
    f1();
    // local
    \f1();
    // global
    f2();
    // global
    \f2();
    // global
}
namespace functions\ns2 {
    function f2()
    {
    }
}
namespace functions\foo\bar\baz {
    function f3()
    {
    }
}
namespace {
    f1();
    // global

function f1($a, $b)
{
    $d = c1::a(5, $a + $b);
    $a = $a + $d['abcd'];
    echo f2($a + $b, $a * $b) . "\n";
}

<?php

# entry point, vuln
function f1($a)
{
    echo $a;
}
function f2($b)
{
    f1($b);
}
f2($_GET['a']);

<?php

function f2()
{
    $i = 0;
    $foo = array(1, 2, 3, 4);
    foreach ($foo as $key => &$val) {
        (yield null);
        echo "key={$key} val={$val}\n";
        if ($val == 2) {
            $foo[$key] = 0;
        } else {
            if ($val == 3) {
                $foo['a'] = 7;
            } else {
                $val++;
            }
        }
        ++$i;
        if ($i >= 20) {
            break;
        }
    }
    var_dump($foo);
}
foreach (f2() as $_) {
}