check REQUEST-vars before use (issue #10)