pentest-php: vulnerable test target (?c=<command>)