phishing attack 27.06 - 28.06: forbid POST requests, forbid POST requests with HTTP 1.0, disable form sending