They are running a locked down version of PHP which allows them to accept public PHP. It then works like any other site.
Example... typing in getcwd() which should show the directory the script is in returns an error. I wouldn't recommend making something like this without knowing the implications.