1
<?php
2
    class secret{
3
        public $file='index.php';
4
        public function __construct($file){
5
            $this->file = $file;
6
        }
7

8
        public function __destruct(){
9
            include($this->file);
10
            if($flag != null){
11
                echo "<br>flag: ".$flag;
12
            }else{
13
                echo "sorry, flag not found";
14
            }
15
        }
16

17
        public function __wakeup(){
18
            $this->file='fakeflag.php';
19
        }
20
    }
21
    $cmd=$_GET['cmd'];
22

23
    if (!isset($cmd)) echo show_source(__FILE__);
24
    else {
25
        if (preg_match('/[oc]:\d+:/i',$cmd)){
26
            echo "Are you daydreaming?";
27
        }
28
        else{
29
            unserialize($cmd);
30
        }
31
    }
32
    //secret in flag.php
33
?> 1

1
        public function __wakeup(){
2
            $this->file='fakeflag.php';
3
        }

1
                echo "<br>flag: ".$flag;