diff --git a/Pattern_Matching/php_auditing b/Pattern_Matching/php_auditing
new file mode 100644
index 0000000..1dafeec
--- /dev/null
+++ b/Pattern_Matching/php_auditing
@@ -0,0 +1,7 @@
+exec
+passthru
+system
+shell_exec
+popen
+proc_open
+pcntl_exec