### Solution:> A calculator web app using PHP to run (it can be seen if you open Inspector and check the input box form action.).   > > ![](https://media.discordapp.net/attachments/771504940623331378/773725370465648640/unknown.png)  > > Our hint tells us a lot. The best way to evaluate user input (in my opinion) is just to print/return whatever your just typed in (you can test this out with some strings of text like "a", but this is a calculator, so it will try to evaluate it like an expression). Since we are using PHP, and our description mentions a flag variable, we can research the symbol to call for a variable. The calculator will just output it to us.  > > ![](https://media.discordapp.net/attachments/771504940623331378/773724141009371146/unknown.png) > > "$flag" should do the trick.  > > ![](https://media.discordapp.net/attachments/771504940623331378/773724276951482378/unknown.png)   
#### **Flag:** nactf{ev1l_eval}