Fixed bug in request() where the unsanitized  var was being used.