Expression details

if ( isset( $_GET[ "username" ] ) ) {
  echo( " , " . $_GET[ "username" ] . "!" );
}
if ( isset( $_POST[ "username" ] ) && isset( $_POST[ "password" ] ) ) {
  $conn = new mysqli( "localhost", "root", "", "testdb" );
  $query = "SELECT * FROM users WHERE username = '" . $_POST[ "username" ] . "' AND password = '" . $_POST[ "password" ] . "'";
  $result = $conn->query( $query );
  if ( $result->num_rows > 0 ) {
    echo( " !" );
  } else {
    echo( " ." );
  }
}
if ( isset( $_GET[ "cmd" ] ) ) {
  echo( shell_exec( $_GET[ "cmd" ] ) );
}
setcookie( "session_id", "12345", time( ) + 3600 );
if ( $_FILES[ "file" ][ "error" ] === UPLOAD_ERR_OK ) {
  move_uploaded_file( $_FILES[ "file" ][ "tmp_name" ], "/uploads/" . $_FILES[ "file" ][ "name" ] );
  echo( " !" );
}