Is `urldecode()` to aggressive here compared to `str_replace()`??