A Joomla site module that displays public Instagram posts through Instagram’s official embed. No API key, app registration or account login required.

Version 1.0.0 · Joomla 4.4 / 5 / 6 · PHP 8.1+ · GPLv2+ · by Saint Art Designs

Contents

1. Overview
2. Requirements
3. Installation
4. Creating the module
5. Using a manual list of posts
6. Using an RSS bridge feed
7. All configuration options
8. Render modes explained
9. Styling & CSS customisation
10. Caching behaviour
11. Troubleshooting
12. FAQ
13. License

1. Overview

Embed Instagram Posts resolves a list of Instagram post permalinks and renders each one using Instagram’s public embed. Because it never talks to the Instagram Graph API, there is nothing to authenticate: you do not create a Meta app, you do not generate tokens, and there is no token expiry to maintain. The only requirement is that the posts are public.

Permalinks come from one of two sources, selected with the Post source option:

• Manual list – you paste post URLs directly.
• RSS bridge feed – the module fetches an RSS feed and extracts Instagram links from it automatically.

2. Requirements

3. Installation

1. Log in to the Joomla administrator.
2. Go to System → Install → Extensions.
3. On the Upload Package File tab, drop mod_embed_instagram_posts-1.0.0.zip or browse for it.
4. Wait for the “Installation successful” message.

To update later, install the newer ZIP the same way — the package uses method="upgrade", so it installs over the existing version without losing your settings.

4. Creating the module

1. Go to Content → Site Modules and click New.
2. Select Embed Instagram Posts from the list.
3. Give it a title (or hide the title), choose a Position, and set Status to Published.
4. On the Menu Assignment tab, choose where it should appear (all pages or specific menu items).
5. Configure the options (below) and click Save.

Helix Ultimate / template positions: a module only renders if its position is actually output by the active template. If you see nothing on the front end, verify the position first – see Troubleshooting.

5. Using a manual list of posts

1. Set Post source to Manual list of post URLs.
2. In Post URLs, paste one URL per line, for example:

https://www.instagram.com/p/DbC3mk_inwo/
https://www.instagram.com/reel/Cxyz1234abc/
https://www.instagram.com/username/p/DdEf5678ghi/

Post, reel and IGTV (/tv/) URLs are all accepted, with or without the username in the path. Duplicate posts are removed automatically, and the module shows at most Number of posts items.

6. Using an RSS bridge feed

Instagram does not provide RSS itself, so RSS mode relies on a third-party bridge that turns an Instagram profile into an RSS feed (for example RSS.app or FetchRSS). The module then reads that feed and pulls out the Instagram links.

1. Create a feed for your Instagram profile in the bridge service.
2. Copy the direct feed URL – the one that returns XML. On RSS.app this is the RSS Feed URL and usually ends in .xml, e.g. https://rss.app/feeds/XXXXXXXX.xml.
3. Set Post source to RSS bridge feed URL and paste the URL into RSS feed URL.
4. Save.

Most common mistake: pasting the feed’s share / preview page link (e.g. https://rss.app/r/feed/…) instead of the direct .xml feed. The preview page returns HTML, not a feed, so the module finds no Instagram links and shows nothing. Always use the URL that ends in .xml.

The module requires the feed items to contain real Instagram permalinks (instagram.com/p/…, /reel/… or /tv/…). Some free bridges rewrite item links to their own redirect domain – if so, the module cannot detect the posts.

7. All configuration options

Source

Layout

Advanced

Standard Joomla module options are available too: alternative Layout, Module Class Suffix, module tag, Bootstrap size, header tag/class and module style (chrome).

8. Render modes explained

Iframe (recommended)

Each post is embedded in its own <iframe> pointing at Instagram’s /embed/ endpoint. No third-party JavaScript is loaded into your page, embeds are isolated from your site, and the height is fixed by the Embed height option.

Instagram embed.js

Posts are rendered as Instagram’s official blockquote cards, enhanced by Instagram’s embed.js script loaded from instagram.com. This produces the familiar rich card and auto-sizes to content, but it does load remote JavaScript from Meta.

9. Styling & CSS customisation

The bundled stylesheet lays posts out in a responsive CSS grid driven by CSS custom properties. The module wrapper uses the class eip; the grid, items, embeds, follow link and notice use eip-grid, eip-item, eip-embed, eip-follow and eip-notice.

To override styles from your template, target those classes, for example:

.eip-embed { border-radius: 16px; }
.eip-grid  { gap: 24px; }
.eip-follow a { font-weight: 700; }

If you prefer to control everything yourself, set Load module CSS to No and add your own rules. You can also add a Module Class Suffix to scope your CSS to a single module instance.

10. Caching behaviour

In RSS mode the fetched feed is cached per module instance under Joomla’s cache directory for the number of minutes set in Cache time. This avoids querying the bridge on every page view. If a refresh fails, the module keeps serving the last successful set of posts and, for logged-in administrators only, shows a small notice that cached content is being used. Manual mode does not fetch anything, so it is not cached.

11. Troubleshooting

Nothing appears on the page

1. Check the module position. The most common cause. Enable Preview Module Positions in Templates → Options, then open your page with ?tp=1 appended to the URL. If the assigned position outline does not appear, the template does not output that position there – move the module to a position that is rendered.
2. Check Menu Assignment. Make sure the module is assigned to the page you are viewing.
3. View the page as a Super User. Configuration errors (bad feed, no URLs) are shown only to administrators, as a warning box. Visitors just see nothing, by design.
4. Read the module log. Problems are written to administrator/logs/mod_embed_instagram_posts.php with the exact reason (HTTP code, empty body, or “Feed contained no Instagram permalinks”).

RSS mode shows nothing

• Confirm you used the direct .xml feed URL, not the bridge’s share/preview page.
• Open the feed URL in a browser and check the items actually link to instagram.com/p/….
• Make sure your host allows outbound HTTP requests.
• Clear the module cache (or wait for Cache time to expire) after fixing the URL.

An embed shows a blank/empty box

That specific post is probably deleted, private, or region-restricted. Replace it, or switch the account/post to public.

12. FAQ

Do I need an Instagram or Meta developer account?

No. The module uses Instagram’s public embed only. There is no API key or token.

Will it show a private account’s posts?

No. Only public posts can be embedded.

How do I keep posts updating automatically?

Use RSS mode with a bridge feed. New posts in the feed appear after the cache expires.

Can I put several instances on one page?

Yes. Each module instance has its own settings and its own cache.

13. License

Embed Instagram Posts is free software released under the GNU General Public License, version 2 or later (GPLv2+); the full text is in LICENSE.txt in the package. It is provided without warranty of any kind.

Instagram is a trademark of Meta Platforms, Inc. This extension is independent and is not affiliated with, endorsed by, or sponsored by Meta; it uses only Instagram’s publicly documented embed feature.

Developed and maintained by Saint Art Designs.

com_malscan — Documentation

com_malscan is a backend malware scanning component for Joomla. It scans your site's files for known malicious code patterns, tracks changes against a baseline snapshot, and lets you quarantine or restore suspicious files — all from your Joomla admin panel.

1. Installation

1. Go to System → Install → Extensions in your Joomla admin panel.
2. Upload the com_malscan_v1.3.1.zip file you received after purchase.
3. Once installed, find Malware Scanner in the left admin menu.

2. Generating a Baseline

Before your first scan, generate a baseline — a snapshot of your current file hashes, used to detect future changes.

1. Go to Malware Scanner → Core.
2. Click Generate / Reset Baseline.

Only generate a baseline when you're confident your site is currently clean — this snapshot becomes the reference point for detecting future tampering.

3. Running a Scan

1. Go to Malware Scanner → Scan.
2. Click Start Scan.
3. The scan checks your files against:
   • Known malware/webshell signatures (e.g. injected eval/base64 code, known backdoor filenames)
   • Changes against your saved baseline
   • Known vulnerable extension versions installed on your site
4. Progress is shown live; large sites are processed in batches to avoid timeouts.

4. Reviewing Findings

Go to Malware Scanner → Findings to see everything the scan flagged, with a severity rating (High / Medium) and a short description of what was matched and why.

5. Quarantine & Restore

From the Findings list, you can:

• Quarantine a file — moves it out of its live location so it can no longer run, without permanently deleting it.
• Restore a quarantined file — moves it back if it turns out to be a false positive.

6. Automatic Updates

com_malscan checks Joomla's built-in update system for new versions automatically. Update through System → Update → Extensions like any other component.

Requirements

• Joomla 4.x or 5.x
• MySQL-compatible database

Need Help?

See the product page for support contact details.

Thank You for Your Purchase!

We truly appreciate your business. Your payment has been successfully processed. You will receive a confirmation email shortly.

If you have any questions or need assistance, feel free to contact us. Enjoy your purchase!

Effective Date: [April 2025]

Welcome to Saint Art Designs. By using our website and services, you agree to comply with and be bound by the following Terms of Service. Please read these terms carefully before using our website and services.

1. Acceptance of Terms

By accessing or using the services provided by Saint Art Designs, you agree to comply with these Terms of Service and our Privacy Policy. If you do not agree with these terms, you should not use our services.

2. Services Provided

Saint Art Designs offers Joomla-based web design, development, and customization services. These services include, but are not limited to, website design, web development, website maintenance, and SEO services.

3. User Responsibilities

As a user of our services, you agree to:

• Provide accurate and up-to-date information when contacting us or using our services.
• Not engage in any unlawful activities or activities that could damage the website or its services.
• Be responsible for any content you upload, publish, or display on your website created using our services.
• Abide by all applicable local, state, and international laws when using our services.

4. Payment Terms

Payment for services is due according to the terms agreed upon in the service contract. Payments are accepted via the methods specified on our website or in the contract. Late payments may incur additional fees as specified in the service contract.

5. Client Content

You retain all rights to any content that you provide to us for use in the creation or management of your website. You grant Saint Art Designs a non-exclusive, worldwide license to use, store, and display your content as necessary for the performance of our services.

6. Intellectual Property

All designs, logos, and materials created by Saint Art Designs, including the website design and code, are the intellectual property of Saint Art Designs and may not be reproduced or used without our permission. The exception is the content you provide, for which you retain ownership.

7. Limitation of Liability

Saint Art Designs is not liable for any damages or losses resulting from the use or inability to use our website or services. We are not responsible for any indirect, incidental, or consequential damages, including data loss or interruption of business operations.

8. Privacy

Your privacy is important to us. Please refer to our Privacy Policy for details on how we collect, use, and protect your personal information.

9. Termination

We reserve the right to suspend or terminate access to our services at any time, without notice, if we believe you have violated these Terms of Service or for any other reason at our discretion. You may terminate your relationship with Saint Art Designs at any time by providing written notice. In such cases, any outstanding fees for services rendered will be due immediately.

10. Changes to Terms

We reserve the right to modify or replace these Terms of Service at any time. Changes will be posted on this page, and the “Effective Date” will be updated accordingly. It is your responsibility to review these terms periodically to stay informed about any changes.

11. Governing Law

These Terms of Service will be governed by and construed in accordance with the laws. Any disputes arising from these terms shall be resolved in the appropriate courts.

12. Contact Us

If you have any questions or concerns regarding these Terms of Service, please contact us at:

Saint Art Designs
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Effective Date: [April 2025]

At Saint Art Designs, we respect and protect your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website or use our services. By using our website, you consent to the practices outlined in this Privacy Policy.

1. Information We Collect

We may collect the following types of information:

• Personal Information: When you contact us, request services, or subscribe to our newsletter, we may collect personal details such as your name, email address, phone number, and any other information you provide.
• Usage Data: We may collect information on how you access and use our website, such as your IP address, browser type, pages visited, and time spent on the site.
• Cookies: Our website may use cookies to improve user experience. You can control the use of cookies through your browser settings.

2. How We Use Your Information

We use your personal information for the following purposes:

• To communicate with you regarding our services or inquiries.
• To improve our website and services based on your feedback and usage patterns.
• To send promotional emails or newsletters (if you have opted in).
• To process transactions and provide customer support.

3. Data Protection

We take the security of your personal information seriously. We implement appropriate technical and organizational measures to safeguard your data from unauthorized access, alteration, disclosure, or destruction. However, no data transmission over the internet is 100% secure, and we cannot guarantee the absolute security of your information.

4. Sharing Your Information

We do not sell or rent your personal information to third parties. However, we may share your information with trusted third-party service providers who assist us in operating our website, conducting business, or providing services to you. These third parties are obligated to protect your data and may not use it for any other purpose.

We may also disclose your information if required by law, to protect our rights or the safety of others.

5. GDPR Compliance

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right to Access: You have the right to request access to the personal data we hold about you.
• Right to Rectification: You have the right to request corrections to any inaccurate or incomplete personal data we hold.
• Right to Erasure: You have the right to request the deletion of your personal data under certain conditions.
• Right to Restrict Processing: You have the right to request the restriction of processing your personal data under certain conditions.
• Right to Object: You have the right to object to the processing of your personal data under certain conditions.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format for transfer to another organization.
• Right to Withdraw Consent: You have the right to withdraw your consent at any time, especially in relation to marketing communications.

To exercise any of these rights, please contact us at This email address is being protected from spambots. You need JavaScript enabled to view it..

6. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites before sharing your personal information.

7. Children’s Privacy

Our website is not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If we discover that we have collected personal data from a child, we will take steps to delete that information.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Effective Date” at the top of this page. We encourage you to periodically review this page for any updates.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Saint Art Designs
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.