the secret page!"; } else { $result = "Invalid code: '$key'"; } } else { $result = "Invalid code: too long"; } $json = json_encode($result, JSON_HEX_TAG); header('X-XSS-Protection: 0'); header('X-Content-Type-Options: nosniff'); header('Content-Type: text/javascript; charset=utf-8'); print "$callback($json)";