allow post variables for all types of uploads other than GET