nice write-up … But u can escalate privilege using www-data shell also … I have done both ways successfully.