Removed some quotes
Added check for .. in request to make it a little less vulnerable