Please, do not write just a link to original writeup here.

Original writeup (https://medium.com/@sed.baddou/chaining-bugs-to-get-shell-easy-and-hard-php-nu1lctf-2018-writeup-6369e6a97218).