This, alongside joining at the same time period as the victim can allow a player to link their information to another player by sending the wrong steamid64. Ideally, find a way to process the user without relying on any GET parameters being sent to tracker.php.