<?
$url = 'show.php/php-under-attack/6';
$tag = "<img src=\"$url?message=Hi\">";
echo htmlentities($tag);
echo $tag;
?>