To state the obvious, there the code is part of the url they have to visit.