tweak to url hacking logic