Create msrf.php