text: /* 8414
   * (NOT)?(\s*\(*)\s*(\w+)\s*(=|&lt;&gt;|&lt;|&gt;|LIKE|IN)\s*(\(([^\)]*)\)|'([^']*)'|(-?\d*\.?\d+))(\s*\)*\s*)(AND|OR)?
   * POLYNOMIAL
   * nums:3
   * POLYNOMIAL AttackString:"1="+"("*10000+"@1 _SLQ_2"
   */
  var REGEX = /(NOT)?(\s*\(*)\s*(\w+)\s*(=|&lt;&gt;|&lt;|&gt;|LIKE|IN)\s*(\(([^\)]*)\)|'([^']*)'|(-?\d*\.?\d+))(\s*\)*\s*)(AND|OR)?/
  for(var i = 1; i <= 5000000; i++) {
      var time = Date.now();
      var attack_str = '1=' + '('.repeat(i*10000) + '@1 _SLQ_2'
      REGEX.exec(attack_str)
      // REGEX.test(attack_str);
      // attack_str.search(REGEX)
      // attack_str.match(REGEX)
      var time_cost = Date.now() - time;
      console.log(i * 10000 + ": " + time_cost+" ms")
  }