=? AND `Schicht.Von` < ?;"; $queryParams = [filter_var($requestParams["from"],FILTER_SANITIZE_NUMBER_FLOAT), filter_var($requestParams["to"],FILTER_SANITIZE_NUMBER_FLOAT)]; } $query = $db->prepare($queryText); $query->execute($queryParams); $events = $query->fetchAll(); return $events; } switch ($_SERVER["REQUEST_METHOD"]) { case "GET": $result = read($db, $_GET); break; case "POST": // only if changes will be allowed break; default: throw new Exception("Unexpected Method"); break; } header("Content-Type: application/json"); echo json_encode($result); ?>