Use $_SERVER[ 'REQUEST_METHOD' ] to determine if HTTP POST, don't compare $http_vars; e.g. $_POST can be empty and equal to $_GET, but the method can still be HTTP POST