Want everyone on your software team to learn this? Free 14-day trial.

Train my team

To make it less obvious what he is doing, he encodes the redirect parameter, and adds some superfluous parameters to the query string.

www.example.com?_g=DernKFjelgnne&vid=iguana-party&referrer=email&next=http%3A%2F%2Fwww.haxxed.com
Mal the hacker