Web - Client

hi,I don’t understand were i’m supposed to host the php script

‘Did you figure it out?’

i hosted a php script on an empty website and i also added a text file called logs to save the cookie nothing happened can i get a closer hint please ?

You absolutely don’t know what is xss. Let me google that for you : http://lmgtfy.com/?q=What+is+xss+vulnerability+%3F :)

Is the "admin" supposed to come look at the page on a timer or something like that?

The admin look at all the messages