More EL code, security for $_POST elements rewritten (simplified):