escaped the REQUEST_URI

Escaped the REQUEST_URI.
request for comment on location

Requesting comment on what the $_GET['location'] is supposed to contain, because right now it can contain anything, which isn't good.
Merge pull request #10 from princezuda/master

Security improvement