Switched the check in order to allow users to override the blacklist, if they wish to.
Only add the request query string if it isn't empty and it isn't equal to '?'