Comment by rossriley

No, this happens sometime in the request parsing process, any exposed php URL would be vulnerable.