Update create-test.class.php

fix persistent XSS