the code on my urls is free to snoop for everyone