Yeah I guess that using the HTTP GET method to parse variables isn't they way to do things in terms of security like this but POST any really any more secure. I use stuff like this all the time at home on my internal server for use around the house but obviously its bad practice to get into the habit of doing this ;)