User data shouldn't be processed at all. You never know where there will be a vulnerability. So you turn off logging so you have no idea what pages your custo

User data shouldn't be processed at all. You never know where there will be a vulnerability. So you turn off logging so you have no idea what pages your customers are now requesting (phew!) but you can still be vulnerable to SQL injection attacks, buffer overflow attacks, etc. when you are processing the user data. Best to just reject it all.