<?php $foo = htmlspecialchars($_GET['foo'], ENT_QUOTES);?><a href="" onmouseover="a='Fantas<?php echo $foo?>tic';">Mouse Over Me</a>
<a href="" onmouseover="a='Fantas';alert(0);//tic';">Mouse Over Me</a>