Turned 'Hide Events' from Javascript to PHP through GET var

Also added some data validation. Better safe than sorry.