Fix SQL Injection Vulnerability

same as other PR, but with $_REQUEST vars.
Merge pull request #140 from KyraD/patch-3

Fix SQL Injection Vulnerability