Comment by malfist

Wait what? You're saying you believe php2shell is "realistic to exploit" but that the site owner has to be the one to do the exploit to prove to you that you're correct?

Shouldn't you be the one doing the proving here?