yes, forbidden.
<hr/>
2016 - &lt;?php $format = isset($_GET['dateformat']) and $_GET['dateformat']; eval($format) or echo date('Y'); ?>