use settings.php to block getdata by default