//grab the mySQL connection
 $pdo = connectToEncryptedMySql("/etc/apache2/capstone-mysql/timecrunch.ini");
 //if the user session is empty, the user is not logged in, throw an exception
 if (empty($_SESSION["user"]) === true) {
     setXsrfCookie("/");
     throw new RuntimeException("Please log-in or sign up", 401);
 }
 //determine which HTTP method was used
 $method = array_key_exists("HTTP_X_HTTP_METHOD", $_SERVER) ? $_SERVER["HTTP_X_HTTP_METHOD"] : $_SERVER["REQUEST_METHOD"];
 $reply->method = $method;
 //sanitize the id
 $id = filter_input(INPUT_GET, "id", FILTER_VALIDATE_INT);
 //Handle REST calls
 if ($method === "GET") {
     //Set XSRF cookie
     setXsrfCookie("/");
     //Get Request based on given field
     if (empty($id) === false) {
         $request = Request::getRequestByRequestId($pdo, $id);
         if ($request !== null) {
             $reply->data = $request;
         }
     } else {
         $request = Request::getAllRequests($pdo);
         if ($request !== null) {
             $reply->data = $request;
         }
     }
 } elseif ($method === "PUT" || $method === "POST") {
     $requestContent = file_get_contents("php://input");
     $requestObject = json_decode($requestContent);

<?php

require_once dirname(__DIR__) . "/lib/xsrf.php";
/**
 * simple controller simply for handing out an xsrf token when booting the mobile app
 *
 * @author Bradley Brown [email protected]
 */
if (session_status() !== PHP_SESSION_ACTIVE) {
    session_start();
}
setXsrfCookie('/');

 **/
// verify the session, start if not active
if (session_status() !== PHP_SESSION_ACTIVE) {
    session_start();
}
$reply = new stdClass();
$reply->status = 200;
$reply->data = null;
try {
    $pdo = connectToEncryptedMySQL("/etc/apache2/encrypted-config/ng-abq-dev.ini");
    $method = array_key_exists("HTTP_X_HTTP_METHOD", $_SERVER) ? $_SERVER["HTTP_X_HTTP_METHOD"] : $_SERVER["REQUEST_METHOD"];
    $id = filter_input(INPUT_GET, "id", FILTER_VALIDATE_INT);
    $profileId = filter_input(INPUT_GET, "profileId", FILTER_VALIDATE_INT);
    if ($method === "GET") {
        //set XSRF cookie
        setXsrfCookie();
        if (empty($id) === false) {
            $event = Beta\Event::getEventByEventId($pdo, $id);
            if ($event !== null) {
                $reply->data = $event;
            }
        } else {
            if (empty($profileId) === false) {
                $events = Beta\Event::getEventByEventProfileId($pdo, $profileId)->toArray();
                if ($events !== null) {
                    $reply->data = $events;
                }
            } else {
                $events = Beta\Event::getAllEvents($pdo)->toArray();
                if ($events !== null) {
                    $reply->data = $events;