only allow curl or get for -d