Agreed with kumar on this one. Either that or run request.GET through a form to clean out data.