Actually make susceptible to SQL injection in URL