Backend Source Code
if(isset($_GET["fname"]) && isset($_GET["lname"])){
    $arr = array('script','img');
    $re = str_replace($arr, '', $_GET['fname']);
    echo $re;
}