Comment by vmiroshnikov

Its not about PHP, any vulnerable software may be used for infection.

PS You're safe if you have no server :)