GET should not be allowed; even if they tick nothing, any HTTP compliant user-agent will send an empty POST request.