title: Query string vs SQL Filter statement
body: <p>I am developing a rest-api. 
  My api maps a query string like: <code>email=xyz@gmail.com&amp;gender=MALE</code> in a sql statement: <code>where email = xyz@gmail.com.br and gender = MALE</code></p>
  
  <p>So why not pass the SQL statament using just a POST method instead of a GET?</p>
  
  <p>Is there any best practices?</p>