phpmps存储xss demo测试成功 (需点击)

case 'updateinfo':                  $id       = intval($_POST['id']);                  checkInfoUser($id, trim($_REQUEST['password']));                    $title    = $_POST['title'] ? htmlspecialchars_deep(trim($_POST['title'])) : '';                  $areaid   = $_POST['areaid'] ? intval($_POST['areaid']) : '';                  $enddate  = !empty($_POST['enddate']) ? (intval($_POST['enddate']*3600*24)) + time() : '0';                  $content  = $_POST['content'] ? htmlspecialchars_deep(trim($_POST['content'])) : '';                  $linkman  = $_POST['linkman'] ? htmlspecialchars_deep(trim($_POST['linkman'])) : '';                  $phone    = $_POST['phone'] ? trim($_POST['phone']) : ''; //没用html函数处理                  $qq       = $_POST['qq'] ? intval($_POST['qq']) : '';                  $email    = $_POST['email'] ? htmlspecialchars_deep(trim($_POST['email'])) : '';                  $address  = $_POST['address'] ? trim($_POST['address']) : '';                  $mappoint = $_POST['mappoint'] ? trim($_POST['mappoint']) : '';                    if(empty($title))showmsg("标题不能为空");                  if(empty($phone) && empty($qq) && empty($email))showmsg("电话、qq、email，必须填写一项");                  check_words(array($title,$content));                    $items = array(                          'areaid' => $areaid,                          'title' => $title,                          'content' => $content,                          'linkman' => $linkman,                          'email' => $email,                          'qq' => $qq,                          'phone' => $phone,                          'mappoint' => $mappoint,                          'address' => $address,                          'enddate' => $enddate                  );                  $res = editInfo($items, $_POST['cus_value'], $id);                    $res ? $msg="恭喜您，修改成功！" : $msg="抱歉修改失败，请与客服联系。";                  $link = "view.php?id=$id";                  showmsg($msg, $link);          break;

');alert('xss