Login page in php with a plugin

I need a simple login page coded in php vulnerable to sql injection, csrf and cross site scripting. I also need a plugin that works to protect that login page from these attacks as well.
The demonstration is to show that the plugin works by showing the before and after its used.
Message me so that we can discuss more!