Look at both GET and POST data if suhosin used

[judgej]

We should look at GET variables on the form URL, because they also get counted on the "suhosin.request.max_vars" setting, if used.

I guess this would need to be an option, if it depends on the PHP modules that are installed.