Since its not using "include" poisoning access log not works, i'd rather enumerate other php files using lfi here, try to get db creds, access sensitive files, etc...