<code><span style="color: #000000">
<span style="color: #0000BB">&lt;?php<br /><br /></span><span style="color: #FF8000">//&nbsp;$FLAG,&nbsp;$USER&nbsp;and&nbsp;$PASSWORD_SHA256&nbsp;in&nbsp;secret&nbsp;file<br /></span><span style="color: #007700">require(</span><span style="color: #DD0000">"secret.php"</span><span style="color: #007700">);<br /><br /></span><span style="color: #FF8000">//&nbsp;show&nbsp;my&nbsp;source&nbsp;code<br /></span><span style="color: #007700">if(isset(</span><span style="color: #0000BB">$_GET</span><span style="color: #007700">[</span><span style="color: #DD0000">'source'</span><span style="color: #007700">])){<br />&nbsp;&nbsp;&nbsp;&nbsp;</span><span style="color: #0000BB">show_source</span><span style="color: #007700">(</span><span style="color: #0000BB">__FILE__</span><span style="color: #007700">);<br />&nbsp;&nbsp;&nbsp;&nbsp;die();<br />}<br /><br /></span><span style="color: #0000BB">$return</span><span style="color: #007700">[</span><span style="color: #DD0000">'status'</span><span style="color: #007700">]&nbsp;=&nbsp;</span><span style="color: #DD0000">'Authentication&nbsp;failed!'</span><span style="color: #007700">;<br />if&nbsp;(isset(</span><span style="color: #0000BB">$_POST</span><span style="color: #007700">[</span><span style="color: #DD0000">"auth"</span><span style="color: #007700">]))&nbsp;&nbsp;{&nbsp;<br />&nbsp;&nbsp;&nbsp;&nbsp;</span><span style="color: #FF8000">//&nbsp;retrieve&nbsp;JSON&nbsp;data<br />&nbsp;&nbsp;&nbsp;&nbsp;</span><span style="color: #0000BB">$auth&nbsp;</span><span style="color: #007700">=&nbsp;@</span><span style="color: #0000BB">json_decode</span><span style="color: #007700">(</span><span style="color: #0000BB">$_POST</span><span style="color: #007700">[</span><span style="color: #DD0000">'auth'</span><span style="color: #007700">],&nbsp;</span><span style="color: #0000BB">true</span><span style="color: #007700">);<br />&nbsp;&nbsp;&nbsp;&nbsp;<br />&nbsp;&nbsp;&nbsp;&nbsp;</span><span style="color: #FF8000">//&nbsp;check&nbsp;login&nbsp;and&nbsp;password&nbsp;(sha256)<br />&nbsp;&nbsp;&nbsp;&nbsp;</span><span style="color: #007700">if(</span><span style="color: #0000BB">$auth</span><span style="color: #007700">[</span><span style="color: #DD0000">'data'</span><span style="color: #007700">][</span><span style="color: #DD0000">'login'</span><span style="color: #007700">]&nbsp;==&nbsp;</span><span style="color: #0000BB">$USER&nbsp;</span><span style="color: #007700">&amp;&amp;&nbsp;!</span><span style="color: #0000BB">strcmp</span><span style="color: #007700">(</span><span style="color: #0000BB">$auth</span><span style="color: #007700">[</span><span style="color: #DD0000">'data'</span><span style="color: #007700">][</span><span style="color: #DD0000">'password'</span><span style="color: #007700">],&nbsp;</span><span style="color: #0000BB">$PASSWORD_SHA256</span><span style="color: #007700">)){<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span style="color: #0000BB">$return</span><span style="color: #007700">[</span><span style="color: #DD0000">'status'</span><span style="color: #007700">]&nbsp;=&nbsp;</span><span style="color: #DD0000">"Access&nbsp;granted!&nbsp;The&nbsp;validation&nbsp;password&nbsp;is:&nbsp;</span><span style="color: #0000BB">$FLAG</span><span style="color: #DD0000">"</span><span style="color: #007700">;<br />&nbsp;&nbsp;&nbsp;&nbsp;}<br />}<br />print&nbsp;</span><span style="color: #0000BB">json_encode</span><span style="color: #007700">(</span><span style="color: #0000BB">$return</span><span style="color: #007700">);<br /><br /></span>
</span>
</code>