diff --git a/flag.php b/flag.php
new file mode 100644
index 0000000..cd7bab2
--- /dev/null
+++ b/flag.php
@@ -0,0 +1,8 @@
+<?php
+session_start();
+if (!isset($_SESSION['admin'])) {
+    http_response_code(403);
+    die("Access denied");
+}
+
+echo getenv('FLAG');