PHP2Shell ‘more complicated than expected to exploit’, BSI says — Blankdot