Don't forget to escape strings before placing them in URLs!