apply filter to _POST['return_to']. use _SESSION['ipv_request_id']
instead of _POST['request_id']
use remote addr instead of _get var