Or use only values out of the $_POST[] (or $HTTP_POST_VARS[]) array. That, after all, is what it's there for
If you never look at the $_GET array, then its contents will be irrelevant.
Of course, this only works if register_globals is turned off, which is why it's done by default, now.