web4.php

<?php 
if(empty($_REQUEST))
{
    highlight_file(__FILE__);
    exit();
}
#error_reporting(0);
session_start();
$_SESSION['a'] = '<?php die("Nice try.");?>';
if(isset($_GET['name']))
{
    $_SESSION['name'] = $_GET['name'];
}

if(isset($_GET['file']))
{
    require($_GET['file']);

}
session_destroy();
#When PHP's built-in session handler is used, and no specific session.save_path is configured in php.ini, PHP typically stores session data in files within the system's temporary directory, commonly /tmp. These files are named with the prefix sess_ followed by the unique session ID (e.g., /tmp/sess_abcdef123456).
 ?>