Create xss.php