sigh

gistfile1.txt

<?php
$song = new StdClass;
$song->artist = '" onmouseover="alert(\'all your base are belong to us\')" foo="';
?>

<form action="#">
	<input type="text" name="xss" value="<?php if (isset($song->artist)) echo $song->artist; ?>">
</form>