<?php
session_start();
if ($_GET['source']){
highlight_file(__FILE__);
exit();
}
class casino_debug {
public $var = "path";
public function __wakeup(){
var_dump($_SESSION);
echo file_get_contents($_SESSION[$this->var]);
}
}
if (!empty($_GET['action']) && $_GET['action'] == "debug") {
echo base64_decode($_COOKIE['debug']);
unserialize(base64_decode($_COOKIE['debug']));
exit();
}
if (!empty($_GET['action']) && $_GET['action'] == "bet" && !empty($_POST['bet']) && !empty($_POST['guess'])) {
if (strpos($_POST['bet'], "/") !== false) {
echo "HACK ATTEMPT!!!eleven!!1!";
exit();
}
$_SESSION['path'] = __FILE__;
$_SESSION['bet'] = md5($_POST['guess'], TRUE) . "/". $_POST['bet'];
// Unfair :(
if (rand() === $_POST['guess']) {
echo "You win:" . file_get_contents("secret.php");
}
else {
echo "You lose :)";
}
}
?>
<html>
<head>
<title>Moon Casino (under construction)</title>
<style>
body{
background: url(moon.jpg) no-repeat center center fixed;
}
</style>
</head>
<body>
<!-- index.php?source=go --!>
</body>
</html>