I tried to poison the user agent tag with some php RCE code but it did not work. Is there another trick I am missing?