Adding runshell.php and substr_count.php to the sandbox. The runshell.php file allows you to run commands on the server from a web page and the substr_count.php is an example of the substring function in PHP.