<?php $foo = htmlspecialchars($_GET['foo'], ENT_QUOTES);?>
<a href="" onmouseover="a='Fantas<?php echo $foo?>tic';">Mouse Over Me</a>

<a href="" onmouseover="a='Fantas&#039;;alert(0);//tic';">Mouse Over Me</a>