3 ms·

If he could get to a bash prompt or get exec() access he could run scripts without +x too... exec('bash path/to/supposedly/unexecutable/script.sh')