changed verification; TODO: use isset() to check if $_POST exists