register form
<form id="registerform" action="<?php echo htmlentities($_SERVER['SCRIPT_NAME']); ?>" method="post">

loginform
<form id="form" action="<?php echo htmlentities($_SERVER['SCRIPT_NAME']); ?>" method="post">


----

<form id="registerform" action="/user/register.php/"><script>alert('xss')</script>" method="post">