If url is not added to the '$allow_list' then it is unset by [PMA_removeRequestVars($allow_list);](https://github.com/dhananjay92/phpmyadmin/blob/bugs%234237/libraries/common.inc.php#L505).