https://ctf-xss-challenge.herokuapp.com/trigger_fake_admin_2.php?id=%26whoami
https://ctf-xss-challenge.herokuapp.com/trigger_fake_admin_2.php?id=%26whoami