<?
header("Content-Type: text/html; charset=utf-8");
?>
<!-- <?php
# Spam a bunch of As to make sure we blow past any buffers.
print str_repeat("A", 2048);
?> -->
<body>
<?php
print "<a ona";
print str_repeat("a", 2000);
flush();
usleep(200000);
print "click=alert(1) ttt>";
?>
Done.