$_REQUEST['variable'] - Variables provided to the script via any user input mechanism (GET, POST, COOKIE) and which therefore cannot be trusted.
If you use $POST or $GET (for forms of course), you know that those variables were the user's inputs from a forum, and not a hacked url.