example: http://www.fotolog.com/all_photos.html?user=[code]
http://www.fotolog.com/all_photos.html?user=%3Ch1%3EXSS%3C/h1%3E
bye
SecurityvulnsSECURITYVULNS:DOC:17000SecurityvulnsSECURITYVULNS:DOC:17000