It seems that php injections are closed too. is that correct? or is there a specific way to add php code in injection?