http://www.example.com/admin.php/"><script>alert('xss')</script>