a asmple of PHP form with XSS