How to load/execute malicious PHP code stored in HTTP cookie values.