protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		String action = request.getParameter("_action");
		if(action == null) {
			if(request.getParameter("name").contains("<script>") || request.getParameter("title").contains("<script>")) {
				response.sendRedirect("http://www.fcbarcelona.es/");
			} else {
				//create
				Box box = new Box(
					UUID.randomUUID().toString(),
					request.getParameter("name"),
					request.getParameter("title"),
					request.getParameter("activated") != null
				);
				service.create(box);
				
				response.sendRedirect("/experiences-jee/boxes?id="+box.getId());
			}
		} else if ("update".equals(action)) {
			//update
			Box box = service.show(request.getParameter("id"));
			box.setName(request.getParameter("name"));
			box.setTitle(request.getParameter("title"));
			box.setActivated(request.getParameter("activated") != null);
			service.update(request.getParameter("id"), box);
			response.sendRedirect("/experiences-jee/boxes?id="+box.getId());
		} else if ("delete".equals(action)) {
			//delete
			service.delete(request.getParameter("id"));
			response.sendRedirect("/experiences-jee/boxes");
		}
	}