diff --git a/XSS/XSS_level2.php b/XSS/XSS_level2.php
new file mode 100644
index 0000000..9f80878
--- /dev/null
+++ b/XSS/XSS_level2.php
@@ -0,0 +1,20 @@
+<!DOCTYPE html>
+<html>
+<head>
+   <title>REFLECTED XSS 2</title>
+</head>
+<body>
+   <form method="GET" action="" name="form">
+   <p>Adınız:<input type="text" name="username"></p>
+   <input type="submit" name="Gönder">
+</form>
+<?php
+if (isset($_GET["username"])) {
+ 	$user = str_replace("<script>", "",$_GET["username"]);
+	echo "$user";
+}
+?>
+
+
+</body>
+</html>
