what's your scenario? are you using the URL parameters to
update a db, if so then don't, and pass it through as a form
variable. Similarly; if reading from a database bind your
parameters. Also, don't output url parameters to HTML text and
response to the client.