Any characters in the parameters that are not allowed in a URL must be double encoded (see HTML URL Encoding Reference for details on URL encoding). Double encoding (running the encoding process twice) is requested on purpose as it is needed to allow web server to accept requests containing slashes ("/" and "\") in parameters, when single-encoded, requests containing single-encoded slashes are thrown back by web servers. Only the parameter values should be double encoded.

The username, password, and bdd_name parameters are optional and can be used to automatically log a user into the control. This should be used with caution, however, because the URL is not encrypted (even if using HTTPS). Supplying login credentials as parameters can be useful when there is a read-only user account that can be accessed by all users.