Search for PHP files that call "eval" (that's bad).

find-php-eval.sh

#!/bin/sh

BASEDIR="${1:-./}"

listfiles () {
  find ${BASEDIR} -type f -print0 | xargs -0 file -i -0 | grep -a "x-php" | cut -d '' -f 1
}

listfiles | xargs grep -l "eval("