This is similar to 萌新web1, but the only difference between them is here adding the function preg_match() that is a regular expression to filter ‘or‘ and ‘+‘.
So we just construct the payload without the above stuff.
原文：https://www.cnblogs.com/4fun/p/15089420.html