Bypass strict input validation to exploit RCE

please read the related article here (add link)

Run challenge

docker run -ti --rm -p 9123:80 -v "$PWD"/index.php:/var/www/html/index.php php:7.2-apache

point your browser to http://localhost:9123