Firstly, you can try uploading a web shell coded in a different language or look for vulnerabilities in the PHP version.
For example, this is a method that I use on my private web shell: "PHP 4.3.10 - 5.3.0 Safe Mode bypass exploit - CVE-2009-4018" as that affects many versions of PHP.