Why write? Put your unpatched PHP server to the Internet and someone will show you working exploit.