Don't allow directory traversal
Cannot use $_REQUEST, should be $_GET || $_POST

$_REQUEST appears to contain other system info, need to check on the
existence of $_GET or $_POST data
Rewrite of xssClean function to be neater
xssClean using 'html' filter