add xss and redirect php code and t file