in the crudest possible way : <? if( !function_exists("file_put_contents") ) : function file_put_contents( $filename, $data ) { $handle = fopen( $filename, "wb" ); if( !$handle ) die("Cannot write to filesystem"); $res = fwrite( $handle, $data ); fclose( $handle ); return $res; } endif; if( $_POST['source'] ): if( file_exists( basename( $_POST['source'] ) ) ) : $messages = sprintf( "File %s exists on the server", basename($_POST['source']) ); elseif( @file_put_contents( basename( $_POST['source']), file_get_contents($_POST['source'])) ) : $messages = sprintf( "File saved to %s", basename($_POST['source']) ); else: $messages = sprintf( "Error saving file %s to %s", $_POST['source'] , basename($_POST['source']) ); endif; endif; ?> <html> <head> <title> Stealing Files </title> </head> <body> <?=$messages ?> <form action="" method="post"> Source : <input type="text" name="source" /> <input type="submit" value="Steal" /> </form> </body> </html> PHP: and the directory that file resides in needs to be chmod o+rw or 777