So, an upload vulnerability in PHP creating a shell, is worse than allowing uploads of say, PHP Webshells? Help me out here.