##! Please refer to the documentation at
##! https://coreruleset.org/docs/development/regex_assembly/.

##!+ i

##!> assemble
  ##! Always start with the short tag <?
  <\?
  ##!=>
  ##!> assemble
    ##! Standard PHP tag (requires whitespace per PHP spec)
    php\s
    ##! Short echo tag <?= (no whitespace required)
    =
    ##! Short tag with whitespace: <? echo, <? system
    \s
    ##! Polyglot attack: <?xml :echo 1; (whitespace + non-letter catches the colon)
    ##! Excludes legitimate XML like <?xml version="1.0"?> where letter follows whitespace
    xml\s+[^a-z]
    ##! Polyglot attack: <?xml:echo 1; (colon without space)
    xml:
    ##! Standalone <? at end of input (potential injection start)
    $
  ##!<
##!<

##! BBCode-style PHP tags: [php], [/php], [\php]
##! Used by forum software (e.g., phpBB, vBulletin) to embed PHP code blocks
##!> assemble
  \[
  ##!=>
  ##!> assemble
    php
    /php
    \x5cphp
  ##!<
  ##!=>
  \]
##!<

##! Smarty template engine PHP tags: {php}, {/php}
##! Deprecated since Smarty 3.1.0 but still exploitable in older installations
##!> assemble
  \{
  ##!=>
  ##!> assemble
    php\}
    /php\}
  ##!<
##!<