 The directive is codice_3 in PHP versions <= 4.3.4 and codice_4 since PHP 5.2.0.In PHP 5.x this directive is disabled by default, in prior versions it was enabled by default.To exploit the vulnerability an attacker will alter a variable that is passed to one of these functions to cause it to include malicious code from a remote resource.