CURL Cross Site Scripting Working