{jphpx .... }

 {jphpx [.. your code]} 

{jphpx [php-apps/games/sudoku.php]}

{jphpx [*10]}

With version 1.3.3, the jphpx system package also provides a module. For example, you can use your own php applications or php code for a Joomla module without having to develop and create a Joomla module yourself.

Note: When updating from version 1.3.2 to version 1.3.3 using the Joomla Updater, the jphpx module will not be installed. Therefore reinstall the complete jphpx package or download and install the jphpx module.

Howto to use a jphpx module

1. Via the menu item "Components" in the administrator backend you select the option "jphpx application" or "jphpx code entry". This calls up the component and you can now define a new jphpx application to be used for your module by clicking the "New" button. With this, a title of the application, the source (the path and the filename), the access and the activation code must be entered. With the "Save" button, the new code entry becomes available after it has been stored successfully..


2. Now create a module with this jphpx application (the jphpx code entry). Select "New" for a new Joomla module via the menu items "System"->"Site Module" in the administrator backend. Then select "jphpx module" from the list of available modules. In the display of the jphpx module
   jphpx Module ×
   , select the desired jphpx Code Entry and configure the other necessary options for using the module. After saving, the new module will then be displayed on your website.

Thousands of php applications, application examples or code snippets are available on the web, of which certainly some of them may cover desired functions. It is worth taking a closer look and testing the code under Joomla. There are a few things you should pay attention to or consider.

First of all, the most important thing: secure the code of your scripts against outside access . To do this, add the following php statement as the first line in your script:

 defined ('_JEXEC') or die ('Restricted access'); 

defined('_JEXEC') or die('Restricted access');
use Joomla\CMS\Factory;
use Joomla\CMS\Uri\Uri;
...

$document = Factory::getDocument ();
$document->addScript(Uri::root(true) . "/my_media/script.min.js");
...   

php scripts of such web applications run on the client side with the help of jphpx under the control and in the environment of Joomla - the server side, however, cannot be executed in the same way under the umbrella of Joomla.

Since version 1.3.0 of jphpx this restriction has been resolved, as the jphpx system plugin suports Ajax requests with the help of the Joomla Ajax interface to be run. The following measures are necessary for this implementation.

1. The client and server programs (the respective php scripts) must be defined as jphpx code entries
2. Ajax requests are based on request urls. These urls have to be changed for the Joomla Ajax interfaces:

   index.php?option=com_ajax&plugin=jphpx&group=system&format=raw&id=nn

   &id=nn is the id of the jphpx code entry of the server program.

 php-apps/server.php?request=1&data=new 

index.php?option=com_ajax&plugin=jphpx&group=system&format=raw&id=10&request=1&data=new

• Includes (or requires) should be checked for correct results and the path and filename adjusted.
• Access to external files should be checked for errors and the path and filename should be adjusted.
• php globals are not supported
• if there are errors caused by the server script, an "HTTP 500 Internal Server Error" is produced. Then check your server script and/or analyze the Apache logs.

Use Secure Ajax

• &check_type="STRING" - (default) Converts the input to a plain text string; strips all tags / attributes.
• &check_type="INT", &check_type="INTEGER" - returns the first integer found in the parameter value
• &check_type="UINT" - checks for an unsigned integer
• &check_type="FLOAT", &check_type="DOUBLE" - returns the first float found
• &check_type="BOOL", &check_type="BOOLEAN" - Expects values 0 ot 1 (note that "true"' or '"false" are Strings)
• &check_type="WORD" - Only allow characters a-z, and underscore
• &check_type="ALNUM" - only alphanumeric characters are allowed
• &check_type="CMD" - Allow a-z, 0-9, underscore, dot, dash. Also remove leading dots from result.
• &check_type="HTML" - converts the input to a string; strips all HTML tags and attributes.
• &check_type=""PATH" - Converts the input into a string and validates it as a path
• &check_type="RAW" - no check are done , be careful using this, to avoid injection attacks on your website!
• &check_type="USERNAME" - strips all invalid username characters.

My php applications are examples of this implementation - they run on the client side as well as on the server side completely under the control and environment of Joomla.