Comment by Incipient

The idea here is you can trigger a server to run the "safe" php file, then send it the webshell version, which passes hash based scanning?