<?php
highlight_file(__FILE__);
include "flag.php";

$_403 = "拒绝访问";
$_200 = "欢迎~~~";

if ($_SERVER["REQUEST_METHOD"] != "POST")
    die("sssssssspost…");

if ( !isset($_POST["flag"]) )
    die($_403);

foreach ($_GET as $key => $value)
    $$key = $$value;

foreach ($_POST as $key => $value)
    $$key = $value;

if ( $_POST["flag"] !== $flag )
    die($_403);

echo "This is your flag : ". $flag . "\n";
die($_200);

?>

$flag='xxxxxxxx';
extract($_GET);
if(isset($liwu)) {
    $content=trim(file_get_contents($flag));
    if($liwu==$content) {
        echo'flag{xxxxxxxxxxx}';
    }
    else {
        echo 'please try other operation.';
    }
}
?>