$_REQUEST has more stuff in it. Here are the definitions:
$_GET - contains form variables sent through GET
$_REQUEST - a merge of the GET variables, POST variables and Cookie variables. In other words - all the information that is coming from the user, and that from a security point of view, cannot be trusted.