Looks like you are able to execute php directly with the query parameter from this request, right? In that case I don't see a lot of sense in deploying a WebServer to provide the payload and writing it to filesystem. Maybe I'm forgetting something. If possible please, execute the php payload directly, it saves having to deploy a Web service plus avoids writing the payload to filesystem.