On: There isn't an easy exploit for this PHP vulnerability

[tempfile]

I don't understand this comment. You seem to be describing in basic terms what a remote code execution vulnerability is. What does that have to do with the comment you're replying to?

[lwhi → tempfile]

I think the original comment may have been amended.

Either that, or I wasn't fully awake when I wrote it.