Get flag from /get.php?include=flag.php

O, i turn `allow_url_include` On :)