Exploitation of your code is not possible when the page is streamed out, because the periods and other PHP command codes you insert in your page are not streamed out to the client machine.
From your example
Code:
<?php $test = $_POST['test']; echo 'You wrote '.$test.'!'; ?>
Leave a comment: