A download portal (paid, for GPL sourced software *ugh*) - checking by mail address, query:
email=mail@addr.com
... seems like php code was checking string equality by:

if query == valid_string

WORKED AROUND WITH:
email[]= in the http request

So, remember:
ALWAYS check with ===