malicious JS code to check whether a student is enrolled in a course.