This is similar to 萌新web1, but the only difference between them is here adding the function preg_match() that is a regular expression to filter 'or' and '+'. 

So we just construct the payload without the above stuff.