first commit

dvwa/vulnerabilities/xss_r/source/impossible.php

@@ -0,0 +1,18 @@
+<?php
+
+// Is there any input?
+if( array_key_exists( "name", $_GET ) && $_GET[ 'name' ] != NULL ) {
+	// Check Anti-CSRF token
+	checkToken( $_REQUEST[ 'user_token' ], $_SESSION[ 'session_token' ], 'index.php' );
+
+	// Get input
+	$name = htmlspecialchars( $_GET[ 'name' ] );
+
+	// Feedback for end user
+	$html .= "<pre>Hello ${name}</pre>";
+}
+
+// Generate Anti-CSRF token
+generateSessionToken();
+
+?>