Basically, we will parse the url to rebuild all $_GET elements, if the link is changed intentionally (heck, you can even do so with the original query string), $_GET will not contain the expected values. But then the user will not gain anything from it, he will get to a page-not-found or an error page depend on the situation. No harm done.