http://chat.bigmir.net/message/index.php?enterMessage="><script>alert()</script>&message="><script>alert()</script>