[xorcist]

It looks like you have dumped the a PHP global variable, possibly $_ENV. Do you know of any circumstances where _ENV, or any other PHP variable with potentially untrusted data, is passed in environment variables?

[moduloo]

i'm working on it it, but it looks like it works only under rare conditions