<?php
include('./config.php');
// nv == necessary value to reach vul
// vul == vulnerable variable

?>
<!DOCTYPE html>
<html lang="en">
	<head>
		<title>Testing Trace</title>
	</head>
	<body>
	<?php
        //junk
        if(isset($_POST['nv6'])) {
            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		    if(isset($_POST['nv7'])) {
                echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		        if(isset($_POST['nv8'])) {
                    echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		            if(isset($_POST['nv9'])) {
                        echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		                if(isset($_POST['nv10'])) {
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                        }
                    }
                }
            }
        }

	    // vul point
	    // echo "Starting EVAL <BR>\n";
	    if(isset($_POST['nv1'])) {
		    if(isset($_POST['nv2'])) {
		        if(isset($_POST['nv3'])) {
		            if(isset($_POST['nv4'])) {
		                if(isset($_POST['nv5'])) {
                            system('ls (');
                            echo "<BR>MADE it to cmd with \n<BR>";
                        } else {
                          echo "<BR>MISSING nv5\n<BR>";
                        }
                    } else {
                        echo "<BR>MISSING nv4\n<BR>";
                    }
                } else {
                    echo "<BR>MISSING nv3\n<BR>";
                }
            } else {
                echo "<BR>MISSING nv2\n<BR>";
            }
        }  else {
            echo "<BR>MISSING nv1\n<BR>";
        }

        //junk
        if(isset($_POST['nv11'])) {
            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		    if(isset($_POST['nv12'])) {
                echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		        if(isset($_POST['nv13'])) {
                    echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		            if(isset($_POST['nv14'])) {
                        echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		                if(isset($_POST['nv15'])) {
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                        }
                    }
                }
            }
        }

        //junk
        if(isset($_POST['nv17'])) {
            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		    if(isset($_POST['nv18'])) {
                echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		        if(isset($_POST['nv19'])) {
                    echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		            if(isset($_POST['nv20'])) {
                        echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		                if(isset($_POST['nv21'])) {
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                        }
                    }
                }
            }
        }

        //junk
        if(isset($_POST['nv22'])) {
            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		    if(isset($_POST['nv23'])) {
                echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		        if(isset($_POST['nv24'])) {
                    echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		            if(isset($_POST['nv25'])) {
                        echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		                if(isset($_POST['nv26'])) {
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                        }
                    }
                }
            }
        }

        //junk
        if(isset($_POST['vul1'])) {
            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		    if(isset($_POST['vul7'])) {
                echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		        if(isset($_POST['vul8'])) {
                    echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		            if(isset($_POST['vul9'])) {
                        echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		                if(isset($_POST['vul10'])) {
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                        }
                    }
                }
            }
        }

        //junk
        if(isset($_POST['vul2'])) {
            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		    if(isset($_POST['vul3'])) {
                echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		        if(isset($_POST['vul4'])) {
                    echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		            if(isset($_POST['vul5'])) {
                        echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
		                if(isset($_POST['vul6'])) {
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                            echo "<BR>junk line\n<BR>";
                        }
                    }
                }
            }
        }
    ?>
	</body>
</html>
