Fix error adding Things when multiple profiles not enabled

The profile_assign field is only sent if the multiple profiles feature is enabled. Trying to escape a non-existing field causes an error in newer PHP versions.

Also replaces all occurences of $_REQUEST with $_POST or $_GET depending on which method they're found in. The $_REQUEST superglobal is dangerous.