<\s\?\s[\s\S]{0,2000}(((\$_get|\$_cookie|\$_post|\$_request|\$_files|\$_global)[([\s\S]{1,20})])|(\b(eval|assert|popen|proc_open|shell_exec|system|passthru|call_userfunc|phpinfo|md5)\s*([\x{20}-\x{73}]+))|\b(echo|print)[\s(]+[\w-\]+([\x{20}-\x{73}]+))[\s\S]{0,1000}\?\s*>
this is the case maybe used:34s, but i use the c code only used:1us
the hyperscan version:5.0.0
<\s\?\s[\s\S]{0,2000}(((\$_get|\$_cookie|\$_post|\$_request|\$_files|\$_global)[([\s\S]{1,20})])|(\b(eval|assert|popen|proc_open|shell_exec|system|passthru|call_userfunc|phpinfo|md5)\s*([\x{20}-\x{73}]+))|\b(echo|print)[\s(]+[\w-\]+([\x{20}-\x{73}]+))[\s\S]{0,1000}\?\s*> this is the case maybe used:34s, but i use the c code only used:1us the hyperscan version:5.0.0