find /var/www/ -name \*.php -exec grep -l "shell_exec" {} +