$_REQUEST has security issues. See https://vip.wordpress.com/documentation/code-review-what-we-look-for/#using-_request should be replaced with $_GET or $_POST instead depending on usage