Looks like arbitrary php execution is possible. Is possible to add a 'php' target? The nice thing about the 'ARCH_PHP' payloads is which use to be multiplatform because it's just php :) I guess you can add both an ARCH_CMD and an ARCH_PHP target if you want the ARCH_CMD target still.