Added section about abusing query parameters.