http://www.example.com/chat.php?action=showmain&PHPSESSID=XSS