Replace mysql_query calls with PDO::prepare in calendar.php file.