Welcome Guest   | Login   
  Search  
  Index |  Recent Threads |  Register | 


Quick Go »
Thread Status: Normal
Total posts in this thread: 4
[Change thread status] [Delete this Thread] [Move this Thread]
[Add To My Favorites] [Watch this Thread] [Post new Thread]
Author
Previous Thread This topic has been viewed 276 times and has 3 replies Next Thread
UnityOmaha
New Member



Joined: Sep 29, 2008
Posts: 1
Status: Offline

Edit this Post   confused   cross site scripting Reply to this Post
Reply with Quote
[Delete this Thread]

How do I know that visitors to my calendar cannot post html or scripting to harm our site or calendar? Have you protected the calendar, or do we need to do that in the page that links to it? I admit, I don't know how to protect our pages (but we dont' have free form inputs either, but are considering a premiut version that would allow users to post events for the administrator's approval, so anything is possible
[Oct 5, 2008, 6:05:07 PM] [68.229.182.76] Show Post Printable Version [Link] Report threatening post: please login first  Go to top 
SarahGiles
localendar Expert



Joined: Sep 28, 2008
Posts: 356
Status: Offline

Edit this Post   Re: cross site scripting Reply to this Post
Reply with Quote
[Delete this Post]

The public is not allowed to edit or change your calendar. You might have localendar set to remember your password, and think that it allows anyone to change your calendar, but that is absolutely not the case.

Your public calendar view (at http://www.localendar.com/public/rgcentertainment) is also not editable.

Sarah Giles
Support Associate
Localendar
[Oct 6, 2008, 9:03:03 PM] [71.172.71.152] Show Post Printable Version [Link] Report threatening post: please login first  Go to top 
speedwaykc
New Member


USA
Joined: Sep 19, 2004
Posts: 1
Status: Offline

Edit this Post   Re: cross site scripting Reply to this Post
Reply with Quote
[Delete this Post]

How can we get rid of google adds on our calendar. How did they get posted with out our permission. We do not want them on the site.
[Feb 4, 2009, 9:07:58 PM] [64.12.116.19] Show Post Printable Version [Link] Report threatening post: please login first  Go to top 
SarahGiles
localendar Expert



Joined: Sep 28, 2008
Posts: 356
Status: Offline

Edit this Post   Re: cross site scripting Reply to this Post
Reply with Quote
[Delete this Post]

I am unsure of how this thread became part of cross site scripting. However, all non-premium calendars have always had ads.

In the past, they would get a giant banner add to the right of the month-view on their calendar. Now, they will get anywhere from zero to three smaller ads inside the calendar. In general, this has the benefit of giving the member more room for their calendar to display (since the big space on the right isn't reserved). Plus, ads will not be shown on any days where there are calendar events.

For only 9.95 (or $.83 a month), users can purchase a Premium Basic subscription that will remove all ads from all calendar views.
If Google offers an add size smaller than 125x125, we will most likely incorporate it.

Our intention is not to distort the calendar size, so we are also working to insure no more than 2 ads are ever shown in a single week of the month view.

Sarah Giles
Support Associate
Localendar
[Feb 6, 2009, 8:39:26 PM] [71.187.221.15] Show Post Printable Version [Link] Report threatening post: please login first  Go to top 
[Show Thread Printable Version] [Post new Thread]

Help! | Cobranding | Legal | Privacy Policy | About localendar.com | Contact Us