Wait what? You're saying you believe php2shell is "realistic to exploit" but that the site owner has to be the one to do the exploit to prove to you that you're correct?
Shouldn't you be the one doing the proving here?
Shouldn't you be the one doing the proving here?
> It was index.html but served from PHP's webserver.
Lol, what does that even mean?