<?php

// this just defines $flag, good luck :)
include '/secret/flag.php';

function json($msg, $numbers = array()) {
    header("Content-type: application/json; charset=utf-8");
    die(json_encode(array('msg' => $msg, 'numbers' => $numbers)));
}


if (!empty($_POST['numbers']) && is_string($_POST['numbers'])) {
    $random_nums = array(rand(1, 40), rand(1, 40), rand(1, 40), rand(1, 40));

    $numbers = explode(',', $_POST['numbers']);

    if (count($numbers) != 4) {
        json('No hacking.');
    }
    foreach ($numbers as $n) {
        $number = intval($n);
        if ($number < 1 || $number > 40) {
            json('Numbers must be between 1 and 40.');
        }
        $clean_numbers[] = $number;
    }
    $count = 0;
    foreach ($clean_numbers as $n) {
        if (in_array($n, $random_nums)) {
            $count++;
        }
    }

    if ($count == 4) {
        json('It seems as if we have a winner: ' . $flag, $random_nums);
    } else {
        json('Sorry, you have not won. 😭', $random_nums);
    }
}
else {
    highlight_file(__FILE__);
}

?>