The textbook I read says that $_REQUEST has security problem so we better use $_POST.
Is this OK?
It's certainly okay to tell people to use $_POST instead of $_REQUEST. It is always better to be more sure about where your getting your data.
$_POST
$_REQUEST