Note that QUERY_STRING seems to get inherited, so to make a virtual request WITHOUT one, one needs to explicitly append a "?" to the URL of the sub-request (to cause the creation of a "null" query string). Of course, if the desired URL has its own query string, that will override and an additional "?" should not be appended.
This was with PHP 4.4.7 (released May 2007).