PHP CTF Challenge: Stored XSS in Chat