I'm not sure the semantics of REQUEST_URI or if it's easy enough to spoof, but if you're having troubles with it, you could try using PHP_SELF. I've never personally ran into troubles with REQUEST_URI being incorrect, but I also haven't ran any high traffic sites.
-m