Edit php.ini :
A modern WAF (ModSecurity, Cloudflare, AWS WAF) can detect common reverse shell signatures. Reverse Shell Php