I really do not like this code. It is maybe save at the moment, but it could be a security hole with a change from someone else in the future. I think we should stick to the django Form-Framework for parsing the GET and POST arguments. @emanuelschuetze, @normanjaeckel what do you think?