<?php
$al = $_GET['al'];
if ($al) {
$al = htmlspecialchars($al);
echo "<p><b>fuck you,</b><br>$al</p>";
}
?>
this will output something like
fuck you,
customized alert
and you append ?al=my alert here
at the end of the url
not my problem if it doesn't work