About '"><script>alert(1)</script>' and benchmark(20000000,sha1(1))--