darflen had a very bad vuln
posting this will excecute any shell command: {{exec('bleh')}}
php moment