1. Extract zip files on desktop.
2. Copy the extracted content into componnets/com_odudecard folder
3. Option Facebook Application ID, API key & Application Secret Facebook Applicatoin at Facebook.com
   

• First you need to log in to the Facebook Developer application:Go to the Facebook Developer App
  After following the link, click “Allow” to let the Developer application access your profile.
•  Begin setting up a new application. Go to the Developer application and click “Set Up New Application”. Give your application a name, check to accept the Terms of Service, then click Submit. You'll see some basic information about your application, including:
  Application ID : ID of your facebook application.
•  Your API key: this key identifies your application to Facebook. You pass it with all your API calls.
• Your application secret: Facebook uses this key to authenticate the requests you make. As you can tell by its name, you should never share this key with anyone.
•  Set Convas Callback URL to your website URL to where you wish to open a page after login.
• Set Connect URL to your base domain name.

Site configuration at Joomla (As in demo):

1. Facebook Application ID : 212093995500149
2. Facebook API Key : 212093995500149
3. Facebook API Secret key : dfefb577bee3b65af75b8987sdfh
4. Facebook Convas URL : https://apps.facebook.com/maxecard/
5. Facebook Cancel URL: http://maxecard.com

Facebook configuration at http://www.facebook.com/developers/ (As in demo) :

1. Site URL : http://maxecard.com/
2. Site Domain : maxecard.com
3. Canvas Page : http://apps.facebook.com/maxecard/
4. Canvas URL : http://maxecard.com/index.php?option=com_odudecard&view=facebook&format=raw
5. Secure Canvas URL : http://maxecard.com/index.php?option=com_odudecard&view=facebook&format=raw
6. IFrame Size: Auto-Resize
7. Canvas FBML/iframe : IFrame
8. App Type: Web
9. Sandbox Mode: DISABLE
10. OAuth Migration: DISABLE
11. Forces use of login secret for OAuth call and for auth.login: DISABLE
12. Require manage_notifications permission: Enable
13. Upgrade to Requests 2.0: Enable
14. Timezone-less events: Enable
15. signed_request for Canvas: Enable
16. Stream post URL security: DISABLE
17. Remove Deprecated Auth Methods: Enable

Demo : http://apps.facebook.com/maxecard/

Note:

• if www is used, use it everywhere else skip it so that it works for all sub domains
• URL with / at the end matters. So check it carefully.