Let’s set the record straight:
@lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet:
His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.