Comment by mschuster91

It's been ages since I last saw a PHP script leak anything as it's state should (!) be reset completely, at least on Apache, with every new request.

How did they manage to create leaks? Or was it bugs in their custom PHP interpreter?