Use require(_once)?('/) to avoid searching entire include path
Regular expression to check that $_POST['week'] is in the correct format

Create a notification if not.
Remove commented out code and formatting consistency