Unobfuscating and Attack - a look into an evil PHP script

Seriously? Who allows uploads to a web-accessible directory with execution enabled?<p>There are so many options that can be transparently used to protect against this without randomly searching for uploaded web scripts.