added restrictions regarding POST data