PHP : Information leak via GET request