How to Install on Server? How to Insert into HTML Page?

[ambassador]

-------
Jul 6, 2005

After looking at the FAQs and every relevantly titled forum, no instructions have been found regarding:

1. How do you install the calendar on your hosting account?

and

2. Once installed onto the hosting account, how do you insert the calendar into a plain HTML page?


Would someone please post a laymen's explanation for those of us who are considering using this calendar? Thank you in advance.

Ambassador
-------

[Brian]

All of the instructions can be found at:

http://docs.easyphpcalendar.com/

:)

If you have any questions along the way, just let us know.

[Tod]

Dear Ambassador,

I, too, am deficient in any type of coding. However, the instructions that Brian sent you to are pretty good at explaining how to install and how to put things on your web page. I use a program called Freeway Pro to do my web sites, which doesn't require any HTML knowledge, yet I managed to add the proper PHP lines in the proper places and you know: It just works! At first I thought that I'd never get through this stuff but with the docs and an occasional post to this forum, I made it. Brian and others here are fantastic and patient with those of us who are code-challenged. Keep plugging away at it and you'll achieve your goal. BTW, I just bought a second license and the second installation and setup went like a breeze! You can see one of my public calendars here:
http://paloaltoelks.org/calendar/elkscalendar.php

One of these days I'll explore the CSS part to fine-tune the actual layout.

Incidentally, regarding your question #1, you'll need some sort of FTP application that can access your hosted account. I'm on a Mac and use Transmit. I'm sure others can suggest PC applications. Once you gain entry to your main folder, you just drag and drop the "calendar" folder into it. And questions, ask them here and one of us will be happy to assist.

-Tod

[ambassador]

-------
Jul 6, 2005

The installation instructions referenced in the link were helpful - thank you.

The files were placed on the hosting account and installed properly. However, upon reading the "Integration" instructions it was discovered that the web page in which the calendar is to be exhibited must end with "php" - this will break the existing SSI instructions which require an "shtml" file extension.

Is there a way to use the Apache server side include (SSI) directives and the "Easy PHP Calendar" on the same page?

Ambassador
-------

[ve9gra]

The 'requirement' to have the page extension be .php is not absolute. It depends on your server configuration. If it's configured to parse every web document for PHP, then you'll be fine by just including the PHP code right into your .shtml document. If it isn't, then you'll have to be a bit more inventive. Like creating a separate .php file with just the HTML and PHP code required to have the calendar display properly, and then include that .php from your .shtml.

I know some other users were also using SSI and IIRC they managed to get it going. As usual, YMMV.

[ambassador]

-------
Jul 7, 2005

What - exactly - will happen if the following two lines are placed into the "htaccess" file?


RemoveHandler .htm .html .shtml
AddType application/x-httpd-php .php .htm .html .shtml


Will this make a Linux-based server execute PHP code that is embedded into an ".shtml" file which contains an Apache SSI directive? Is this safe?


If it is appropriate to mentione here, the hosting service is www_lunarpages_com (dots go where the "_" are).


Ambassador
-------

[Brian]

It will make your server look for code in regular .html pages so you don't need to have a .php extension. This may help your situation.

[ambassador]

-------
Jul 7, 2005

Does this pose any security risks?

Ambassador
-------

[Brian]

As far as the calendar script is concerned, I am not aware of any security implications due to this. As for your other pages, it all depends on how secure your pages are and if any code and be injected into them using XSS.

[ambassador]

-------
Jul 7, 2005

How does one determine the security of web pages and whether or not code can be injected into them using XSS?

The web pages are XHTML 1.0 Strict. They use common Apache SSI directives like:



<!--#echo var="DATE_LOCAL" -->




There is no Javascript or any code whatsoever except XHTML, CSS, and the aforementioned Apache SSI directives. The website is hosted on www_lunarpages_com which is a Linux-based hosting service.



Ambassador
-------

[ve9gra]

If you have no forms of any kind anywhere, I don't think there will be any problems. As your pages are all .shtml there should be no PHP code in there anyways (except for the includes for the calendar), so you're no more at risk. If you do have forms, you'll have to be sure that the data is escaped properly so that someone can't pass PHP code to your server directly.