Its to do with the code, hell someone who knows what there doing could use the address bar to atack a site (SQL Injection), if its not properly secured that is