You're right about the security issues and side-effects, I've written a small introduction to server-side programming that also explains this at: the difference between GET and POST

-- 
Joost       downtime n. The period during which a system
            is error-free and immune from user input.
[download]