反射型xss(get)
查看源码
if($_GET['message']=='kobe'){
$html.="<p class='notice'>愿你和{
$_GET['message']}一样,永远年轻,永远热血沸腾!</p><img src='{
$PIKA_ROOT_DIR}assets/images/nbaplayer/kobe.png' />";
}else{
$html.="<p class='notice'>who is {
$_GET['message']},i don't care!</p>";
------